--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5052115f9d379f3f972991162e115f2f532513a3fbc68742547bd787b918061"} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059"} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059"} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059"} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059"} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059"} {"level":"error","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T01:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"} {"level":"error","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8"} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8"} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8"} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8"} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f"} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f"} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eec815b638929f4a0f9f977facc5cbbe01bc4545e60f56c4bb7ffe4ff412613f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eec815b638929f4a0f9f977facc5cbbe01bc4545e60f56c4bb7ffe4ff412613f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eec815b638929f4a0f9f977facc5cbbe01bc4545e60f56c4bb7ffe4ff412613f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eec815b638929f4a0f9f977facc5cbbe01bc4545e60f56c4bb7ffe4ff412613f"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eec815b638929f4a0f9f977facc5cbbe01bc4545e60f56c4bb7ffe4ff412613f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eec815b638929f4a0f9f977facc5cbbe01bc4545e60f56c4bb7ffe4ff412613f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eec815b638929f4a0f9f977facc5cbbe01bc4545e60f56c4bb7ffe4ff412613f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eec815b638929f4a0f9f977facc5cbbe01bc4545e60f56c4bb7ffe4ff412613f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eec815b638929f4a0f9f977facc5cbbe01bc4545e60f56c4bb7ffe4ff412613f"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eec815b638929f4a0f9f977facc5cbbe01bc4545e60f56c4bb7ffe4ff412613f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eec815b638929f4a0f9f977facc5cbbe01bc4545e60f56c4bb7ffe4ff412613f"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:29:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c"} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034"} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e"} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034"} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b49fd1958c969d6cbca6d4731521aa0cc39e90043bc1f79bba69e0aca9ab000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e"} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b49fd1958c969d6cbca6d4731521aa0cc39e90043bc1f79bba69e0aca9ab000","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034"} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b49fd1958c969d6cbca6d4731521aa0cc39e90043bc1f79bba69e0aca9ab000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b49fd1958c969d6cbca6d4731521aa0cc39e90043bc1f79bba69e0aca9ab000","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b49fd1958c969d6cbca6d4731521aa0cc39e90043bc1f79bba69e0aca9ab000","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b49fd1958c969d6cbca6d4731521aa0cc39e90043bc1f79bba69e0aca9ab000"} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b49fd1958c969d6cbca6d4731521aa0cc39e90043bc1f79bba69e0aca9ab000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b49fd1958c969d6cbca6d4731521aa0cc39e90043bc1f79bba69e0aca9ab000"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b49fd1958c969d6cbca6d4731521aa0cc39e90043bc1f79bba69e0aca9ab000","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b49fd1958c969d6cbca6d4731521aa0cc39e90043bc1f79bba69e0aca9ab000","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b49fd1958c969d6cbca6d4731521aa0cc39e90043bc1f79bba69e0aca9ab000"} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621"} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621"} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9"} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c"} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c"} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"} {"level":"info","ts":"2026-07-09T01:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"} {"level":"info","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18"} {"level":"info","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"} {"level":"info","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"} {"level":"info","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18"} {"level":"info","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"} {"level":"info","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"} {"level":"error","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39672","PortSpecifier":{"PortValue":39672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39672","PortSpecifier":{"PortValue":39672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560603,"nanos":183920054},"http":{"id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/auth-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60bdbeb3-dd26-4900-bd38-f7d93dd9a62e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48322","PortSpecifier":{"PortValue":48322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b094cb30-bd02-49d3-8b02-4911c186336d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48322","PortSpecifier":{"PortValue":48322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560603,"nanos":249230434},"http":{"id":"b094cb30-bd02-49d3-8b02-4911c186336d","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/auth-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b094cb30-bd02-49d3-8b02-4911c186336d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39686","PortSpecifier":{"PortValue":39686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","method":"GET","path":"/maas-api/v1/api-keys/d6200225-86e6-403c-b965-4ec0ffd0271f","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39686","PortSpecifier":{"PortValue":39686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560603,"nanos":360852743},"http":{"id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","method":"GET","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d6200225-86e6-403c-b965-4ec0ffd0271f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d6200225-86e6-403c-b965-4ec0ffd0271f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/auth-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"415210e9-2ac8-4e49-b5e2-13fb63736db6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed03c469-147d-4bbf-83af-05a465537e61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48330","PortSpecifier":{"PortValue":48330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed03c469-147d-4bbf-83af-05a465537e61","method":"GET","path":"/maas-api/v1/api-keys/83a492cd-e467-4be4-b171-5aed84b5f11d","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed03c469-147d-4bbf-83af-05a465537e61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48330","PortSpecifier":{"PortValue":48330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560603,"nanos":410499254},"http":{"id":"ed03c469-147d-4bbf-83af-05a465537e61","method":"GET","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/83a492cd-e467-4be4-b171-5aed84b5f11d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed03c469-147d-4bbf-83af-05a465537e61","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed03c469-147d-4bbf-83af-05a465537e61","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed03c469-147d-4bbf-83af-05a465537e61","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/83a492cd-e467-4be4-b171-5aed84b5f11d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed03c469-147d-4bbf-83af-05a465537e61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed03c469-147d-4bbf-83af-05a465537e61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed03c469-147d-4bbf-83af-05a465537e61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/auth-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed03c469-147d-4bbf-83af-05a465537e61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed03c469-147d-4bbf-83af-05a465537e61","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed03c469-147d-4bbf-83af-05a465537e61","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed03c469-147d-4bbf-83af-05a465537e61","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:30:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed03c469-147d-4bbf-83af-05a465537e61","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34432","PortSpecifier":{"PortValue":34432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34432","PortSpecifier":{"PortValue":34432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560625,"nanos":620927869},"http":{"id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/auth-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c752ee3-6c8e-47c7-9bb2-3041383b61c1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47366","PortSpecifier":{"PortValue":47366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4aee9caf-09f4-4776-9188-644f04a32e87","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47366","PortSpecifier":{"PortValue":47366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560625,"nanos":662935357},"http":{"id":"4aee9caf-09f4-4776-9188-644f04a32e87","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/auth-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4aee9caf-09f4-4776-9188-644f04a32e87","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93f345a9-6f3c-4824-9990-15303d19e414","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34434","PortSpecifier":{"PortValue":34434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93f345a9-6f3c-4824-9990-15303d19e414","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93f345a9-6f3c-4824-9990-15303d19e414","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34434","PortSpecifier":{"PortValue":34434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560625,"nanos":702334907},"http":{"id":"93f345a9-6f3c-4824-9990-15303d19e414","method":"GET","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93f345a9-6f3c-4824-9990-15303d19e414","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Io0sMJ5QNEzOnRO8_QCQdkEDhvtcUPmlJspHnNGIcCSHXoWN0F5l4b7qxdgL"} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93f345a9-6f3c-4824-9990-15303d19e414","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Io0sMJ5QNEzOnRO8_QCQdkEDhvtcUPmlJspHnNGIcCSHXoWN0F5l4b7qxdgL\"}"} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93f345a9-6f3c-4824-9990-15303d19e414","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1f0b6cde-c775-4b8c-b65b-8f52fefa4aac","keyName":"e2e-auth-iso-a-c22809","subscription":"e2e-auth-iso-a0133d","tenant":"e2e-shared-a-88a238","userId":"1f0b6cde-c775-4b8c-b65b-8f52fefa4aac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93f345a9-6f3c-4824-9990-15303d19e414","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93f345a9-6f3c-4824-9990-15303d19e414","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93f345a9-6f3c-4824-9990-15303d19e414","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93f345a9-6f3c-4824-9990-15303d19e414","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/auth-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93f345a9-6f3c-4824-9990-15303d19e414","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93f345a9-6f3c-4824-9990-15303d19e414","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93f345a9-6f3c-4824-9990-15303d19e414","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93f345a9-6f3c-4824-9990-15303d19e414","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a0133d"} {"level":"info","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93f345a9-6f3c-4824-9990-15303d19e414","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93f345a9-6f3c-4824-9990-15303d19e414","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38122","PortSpecifier":{"PortValue":38122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38122","PortSpecifier":{"PortValue":38122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560644,"nanos":915426976},"http":{"id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/auth-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7f2ffda-6a6b-4c7b-a7d6-be9b333469e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57828","PortSpecifier":{"PortValue":57828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57828","PortSpecifier":{"PortValue":57828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560644,"nanos":958624246},"http":{"id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/auth-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27865f8c-dd1a-43fa-8d0e-0cac3c177cf1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7552e0b-163c-47f4-ad73-eac66b3a8842","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57830","PortSpecifier":{"PortValue":57830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7552e0b-163c-47f4-ad73-eac66b3a8842","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7552e0b-163c-47f4-ad73-eac66b3a8842","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57830","PortSpecifier":{"PortValue":57830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560644,"nanos":995350363},"http":{"id":"c7552e0b-163c-47f4-ad73-eac66b3a8842","method":"GET","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7552e0b-163c-47f4-ad73-eac66b3a8842","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EZ6qMPONSnU84aAz_iV2xhk8GRe8tmoAJCDmtO6elaoYXQKwh0lDdvDLNt5o"} {"level":"debug","ts":"2026-07-09T01:30:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7552e0b-163c-47f4-ad73-eac66b3a8842","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EZ6qMPONSnU84aAz_iV2xhk8GRe8tmoAJCDmtO6elaoYXQKwh0lDdvDLNt5o\"}"} {"level":"debug","ts":"2026-07-09T01:30:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7552e0b-163c-47f4-ad73-eac66b3a8842","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-09T01:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7552e0b-163c-47f4-ad73-eac66b3a8842","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:30:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c7552e0b-163c-47f4-ad73-eac66b3a8842","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-09T01:30:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7552e0b-163c-47f4-ad73-eac66b3a8842","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-09T01:30:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7552e0b-163c-47f4-ad73-eac66b3a8842","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57854","PortSpecifier":{"PortValue":57854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57854","PortSpecifier":{"PortValue":57854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560664,"nanos":174843940},"http":{"id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/auth-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68ad32cc-1af9-4f81-9ee7-3723694b20df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df173278-0330-4e81-b4f3-5c530baa9074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34592","PortSpecifier":{"PortValue":34592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df173278-0330-4e81-b4f3-5c530baa9074","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df173278-0330-4e81-b4f3-5c530baa9074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34592","PortSpecifier":{"PortValue":34592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560664,"nanos":220375109},"http":{"id":"df173278-0330-4e81-b4f3-5c530baa9074","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df173278-0330-4e81-b4f3-5c530baa9074","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df173278-0330-4e81-b4f3-5c530baa9074","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df173278-0330-4e81-b4f3-5c530baa9074","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df173278-0330-4e81-b4f3-5c530baa9074","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df173278-0330-4e81-b4f3-5c530baa9074","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df173278-0330-4e81-b4f3-5c530baa9074","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/auth-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df173278-0330-4e81-b4f3-5c530baa9074","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df173278-0330-4e81-b4f3-5c530baa9074","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df173278-0330-4e81-b4f3-5c530baa9074","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df173278-0330-4e81-b4f3-5c530baa9074","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df173278-0330-4e81-b4f3-5c530baa9074","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68bca513-577d-416a-ab02-5308b5b49819","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57866","PortSpecifier":{"PortValue":57866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68bca513-577d-416a-ab02-5308b5b49819","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68bca513-577d-416a-ab02-5308b5b49819","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57866","PortSpecifier":{"PortValue":57866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560664,"nanos":261395547},"http":{"id":"68bca513-577d-416a-ab02-5308b5b49819","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68bca513-577d-416a-ab02-5308b5b49819","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68bca513-577d-416a-ab02-5308b5b49819","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68bca513-577d-416a-ab02-5308b5b49819","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68bca513-577d-416a-ab02-5308b5b49819","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68bca513-577d-416a-ab02-5308b5b49819","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68bca513-577d-416a-ab02-5308b5b49819","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/auth-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68bca513-577d-416a-ab02-5308b5b49819","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68bca513-577d-416a-ab02-5308b5b49819","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68bca513-577d-416a-ab02-5308b5b49819","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68bca513-577d-416a-ab02-5308b5b49819","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68bca513-577d-416a-ab02-5308b5b49819","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34598","PortSpecifier":{"PortValue":34598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34598","PortSpecifier":{"PortValue":34598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560664,"nanos":298860237},"http":{"id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/auth-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"989f7b6b-b460-4c9b-97d4-9a44723acb8d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59250","PortSpecifier":{"PortValue":59250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59250","PortSpecifier":{"PortValue":59250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560681,"nanos":453137074},"http":{"id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/auth-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a617ce78-f7f5-4209-88f3-f7e4ab57de73","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34196","PortSpecifier":{"PortValue":34196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7770cb64-2c3e-4726-bff8-cc0512694e71","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34196","PortSpecifier":{"PortValue":34196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560681,"nanos":492467635},"http":{"id":"7770cb64-2c3e-4726-bff8-cc0512694e71","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/auth-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7770cb64-2c3e-4726-bff8-cc0512694e71","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f53423c-1392-4813-a69a-67666f0c3941","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34198","PortSpecifier":{"PortValue":34198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f53423c-1392-4813-a69a-67666f0c3941","method":"GET","path":"/maas-api/v1/api-keys/f0c01870-43a3-4d0d-9f25-4187cca2929a","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f53423c-1392-4813-a69a-67666f0c3941","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34198","PortSpecifier":{"PortValue":34198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560681,"nanos":531304496},"http":{"id":"6f53423c-1392-4813-a69a-67666f0c3941","method":"GET","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f0c01870-43a3-4d0d-9f25-4187cca2929a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f53423c-1392-4813-a69a-67666f0c3941","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f53423c-1392-4813-a69a-67666f0c3941","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f53423c-1392-4813-a69a-67666f0c3941","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f0c01870-43a3-4d0d-9f25-4187cca2929a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f53423c-1392-4813-a69a-67666f0c3941","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f53423c-1392-4813-a69a-67666f0c3941","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f53423c-1392-4813-a69a-67666f0c3941","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/auth-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f53423c-1392-4813-a69a-67666f0c3941","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f53423c-1392-4813-a69a-67666f0c3941","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f53423c-1392-4813-a69a-67666f0c3941","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f53423c-1392-4813-a69a-67666f0c3941","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f53423c-1392-4813-a69a-67666f0c3941","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3687401-902b-4c5f-8d21-b6983a167331","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59262","PortSpecifier":{"PortValue":59262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3687401-902b-4c5f-8d21-b6983a167331","method":"GET","path":"/maas-api/v1/api-keys/f0c01870-43a3-4d0d-9f25-4187cca2929a","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3687401-902b-4c5f-8d21-b6983a167331","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59262","PortSpecifier":{"PortValue":59262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560681,"nanos":565683767},"http":{"id":"c3687401-902b-4c5f-8d21-b6983a167331","method":"GET","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f0c01870-43a3-4d0d-9f25-4187cca2929a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3687401-902b-4c5f-8d21-b6983a167331","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3687401-902b-4c5f-8d21-b6983a167331","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3687401-902b-4c5f-8d21-b6983a167331","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f0c01870-43a3-4d0d-9f25-4187cca2929a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3687401-902b-4c5f-8d21-b6983a167331","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3687401-902b-4c5f-8d21-b6983a167331","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3687401-902b-4c5f-8d21-b6983a167331","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/auth-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3687401-902b-4c5f-8d21-b6983a167331","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3687401-902b-4c5f-8d21-b6983a167331","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3687401-902b-4c5f-8d21-b6983a167331","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3687401-902b-4c5f-8d21-b6983a167331","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3687401-902b-4c5f-8d21-b6983a167331","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47360","PortSpecifier":{"PortValue":47360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47360","PortSpecifier":{"PortValue":47360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560700,"nanos":841619531},"http":{"id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/auth-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59c64496-37f9-4eb3-8361-abf6dc71c3bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38118","PortSpecifier":{"PortValue":38118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38118","PortSpecifier":{"PortValue":38118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560700,"nanos":900876463},"http":{"id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/auth-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c84cff60-eab3-4a9e-906b-5a4e3c9dc158","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47364","PortSpecifier":{"PortValue":47364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47364","PortSpecifier":{"PortValue":47364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560700,"nanos":961520289},"http":{"id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-b2ADq01qyxi2Inca_t0ChIe6wDx9AQxzaRJnNaD4VB1kWUPpnhdmfJelSMUq"} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-b2ADq01qyxi2Inca_t0ChIe6wDx9AQxzaRJnNaD4VB1kWUPpnhdmfJelSMUq\"}"} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d13edb35-b0a7-44dc-814d-a88ca0ec49a0","keyName":"e2e-auth-iso-a-7de1a3","subscription":"e2e-auth-iso-24f8c4","tenant":"e2e-shared-a-88a238","userId":"d13edb35-b0a7-44dc-814d-a88ca0ec49a0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/auth-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-24f8c4"} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:31:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9407bf4-76ba-4220-80de-8d47cf7ae5d6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84c35a171c5d0fbefb2962e22a643eae4f992b56ff74e833f066075930dbbc04"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/732fed1bf4a3a61b94e0361d1c09114f5ba069a51b2267e518ce02f3a9c76034"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/058dd52e99b33b916cd96b021d500c9a5501a520dc997c3a2f33ca99f55db17c"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/017c9edee3561551d0fa9894aa52b228f343dd175d593adf896521df2f42fd3f"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b49fd1958c969d6cbca6d4731521aa0cc39e90043bc1f79bba69e0aca9ab000"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f8ad203ffc5dfdcea400757f6d029748a5dfdcbb8cac8e69aaa29435f0da059"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/677c2f68a4f22c407295689e31ff8b190e257534899be291ae801ae08e10fac8"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5052115f9d379f3f972991162e115f2f532513a3fbc68742547bd787b918061"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ebbe190d537d6e72e61e75e257b404b8fbcc6640204b5953c0f33cf60fb4c67"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eec815b638929f4a0f9f977facc5cbbe01bc4545e60f56c4bb7ffe4ff412613f"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45e35e9b9b1d14651f6f9e89e4395163a6e9e028af9ab6740a9681327066e621"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d09c8cf6c7572c8b30da91b16d07480a578a86151054856609355baa2afaa32c"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0820ec3b1a1245e8bc49d766eb1501184277dfdbed4c81c43c5f14fff09e241"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cc0e259de08361e78c9c0b7cfed49d8e2d2d875c4f0e42b0f813a79e96961f2"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd4d95fa67ca225cfbbaed485d7cf991981a5edf5015b2b4aae1c69f4eb7397e"} {"level":"info","ts":"2026-07-09T01:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c00b8e4156e5946b06ea670857553d4d3ab11650fd496a987f30f7ce404446f"} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf"} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf"} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf"} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"debug","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0"} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"} {"level":"info","ts":"2026-07-09T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0"} {"level":"debug","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316"} {"level":"error","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316"} {"level":"debug","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153"} {"level":"info","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153"} {"level":"debug","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316"} {"level":"info","ts":"2026-07-09T01:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a"} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076"} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076"} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076"} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be"} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be"} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"} {"level":"debug","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"} {"level":"debug","ts":"2026-07-09T01:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076"} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076"} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076"} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076"} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076"} {"level":"info","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0"} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"debug","ts":"2026-07-09T01:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d"} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a"} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf"} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be"} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a"} {"level":"debug","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316"} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153"} {"level":"info","ts":"2026-07-09T01:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"} {"level":"info","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60208","PortSpecifier":{"PortValue":60208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb5afe59-dd4c-446d-bfca-40933e555272","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60208","PortSpecifier":{"PortValue":60208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560763,"nanos":777094152},"http":{"id":"bb5afe59-dd4c-446d-bfca-40933e555272","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/sub-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb5afe59-dd4c-446d-bfca-40933e555272","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54578","PortSpecifier":{"PortValue":54578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54578","PortSpecifier":{"PortValue":54578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560763,"nanos":814943948},"http":{"id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/sub-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b3aa42a-86d9-462f-9059-aa9fa62ba934","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60212","PortSpecifier":{"PortValue":60212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e248daa2-eec9-42f9-81dc-707beed7d34d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60212","PortSpecifier":{"PortValue":60212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560763,"nanos":858263163},"http":{"id":"e248daa2-eec9-42f9-81dc-707beed7d34d","method":"GET","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PAxBEtWrngyHrywT_xiF8IQJRxJkQiVEyb1O4UG4WsXURtw9UoRbPukoxhw4"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PAxBEtWrngyHrywT_xiF8IQJRxJkQiVEyb1O4UG4WsXURtw9UoRbPukoxhw4\"}"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bc3abb07-22f2-4d4e-9729-a7afa4e89dde","keyName":"e2e-sub-iso-02f3b5","subscription":"e2e-a-only-5969ed","tenant":"e2e-shared-a-88a238","userId":"bc3abb07-22f2-4d4e-9729-a7afa4e89dde","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/sub-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-5969ed"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e248daa2-eec9-42f9-81dc-707beed7d34d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8127f443-937b-4674-8459-651a1fa299f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54590","PortSpecifier":{"PortValue":54590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8127f443-937b-4674-8459-651a1fa299f6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8127f443-937b-4674-8459-651a1fa299f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54590","PortSpecifier":{"PortValue":54590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560763,"nanos":900575426},"http":{"id":"8127f443-937b-4674-8459-651a1fa299f6","method":"GET","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8127f443-937b-4674-8459-651a1fa299f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4siNjsCXaE19YVO6_3GEJU9srm9XpTHZ0YpXl2blddYGkXCEVkxu9CWlbOxm"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8127f443-937b-4674-8459-651a1fa299f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4siNjsCXaE19YVO6_3GEJU9srm9XpTHZ0YpXl2blddYGkXCEVkxu9CWlbOxm\"}"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8127f443-937b-4674-8459-651a1fa299f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fee1aa71-a9c1-4216-9571-9aae61bc8e34","keyName":"e2e-sub-iso-c16b4d","subscription":"e2e-b-only-5969ed","tenant":"e2e-shared-b-52d242","userId":"fee1aa71-a9c1-4216-9571-9aae61bc8e34","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8127f443-937b-4674-8459-651a1fa299f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8127f443-937b-4674-8459-651a1fa299f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8127f443-937b-4674-8459-651a1fa299f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8127f443-937b-4674-8459-651a1fa299f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/sub-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8127f443-937b-4674-8459-651a1fa299f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8127f443-937b-4674-8459-651a1fa299f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8127f443-937b-4674-8459-651a1fa299f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-5969ed"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8127f443-937b-4674-8459-651a1fa299f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8127f443-937b-4674-8459-651a1fa299f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8127f443-937b-4674-8459-651a1fa299f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26153400-d885-48b2-b399-c93099465b4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49686","PortSpecifier":{"PortValue":49686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26153400-d885-48b2-b399-c93099465b4e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26153400-d885-48b2-b399-c93099465b4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49686","PortSpecifier":{"PortValue":49686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560782,"nanos":782768733},"http":{"id":"26153400-d885-48b2-b399-c93099465b4e","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26153400-d885-48b2-b399-c93099465b4e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26153400-d885-48b2-b399-c93099465b4e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26153400-d885-48b2-b399-c93099465b4e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26153400-d885-48b2-b399-c93099465b4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26153400-d885-48b2-b399-c93099465b4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26153400-d885-48b2-b399-c93099465b4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/sub-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26153400-d885-48b2-b399-c93099465b4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26153400-d885-48b2-b399-c93099465b4e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26153400-d885-48b2-b399-c93099465b4e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26153400-d885-48b2-b399-c93099465b4e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26153400-d885-48b2-b399-c93099465b4e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99003081-beb4-467b-9477-3739409a91cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34014","PortSpecifier":{"PortValue":34014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99003081-beb4-467b-9477-3739409a91cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99003081-beb4-467b-9477-3739409a91cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34014","PortSpecifier":{"PortValue":34014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560782,"nanos":820553096},"http":{"id":"99003081-beb4-467b-9477-3739409a91cc","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99003081-beb4-467b-9477-3739409a91cc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99003081-beb4-467b-9477-3739409a91cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99003081-beb4-467b-9477-3739409a91cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99003081-beb4-467b-9477-3739409a91cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99003081-beb4-467b-9477-3739409a91cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99003081-beb4-467b-9477-3739409a91cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/sub-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99003081-beb4-467b-9477-3739409a91cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99003081-beb4-467b-9477-3739409a91cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99003081-beb4-467b-9477-3739409a91cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99003081-beb4-467b-9477-3739409a91cc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99003081-beb4-467b-9477-3739409a91cc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49694","PortSpecifier":{"PortValue":49694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49694","PortSpecifier":{"PortValue":49694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560782,"nanos":857215569},"http":{"id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HMkPNe9gV0hJ94Aa_mUDpk8OPJZL2JypyZfSv6Eu6aQd0s8Z1rz8fOWteKcV"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HMkPNe9gV0hJ94Aa_mUDpk8OPJZL2JypyZfSv6Eu6aQd0s8Z1rz8fOWteKcV\"}"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7483b448-f7f6-4a42-832e-f5a510ad7a12","keyName":"e2e-sub-iso-41f6c7","subscription":"e2e-shared-sub-99c043","tenant":"e2e-shared-a-88a238","userId":"7483b448-f7f6-4a42-832e-f5a510ad7a12","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/sub-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-99c043"} {"level":"info","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbdae3e4-1640-9e06-b4d0-064dcbb344e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34020","PortSpecifier":{"PortValue":34020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34020","PortSpecifier":{"PortValue":34020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560782,"nanos":889323416},"http":{"id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-G6NePHFTz7eTbge_jpUoiSGa2E6xMXRdpYaFBUrZ5KMPWfWBgqWU8dNwHz0"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-G6NePHFTz7eTbge_jpUoiSGa2E6xMXRdpYaFBUrZ5KMPWfWBgqWU8dNwHz0\"}"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f45e981-d4f9-49eb-99b9-102ecfb4eb6b","keyName":"e2e-sub-iso-f5ee64","subscription":"e2e-shared-sub-99c043","tenant":"e2e-shared-b-52d242","userId":"8f45e981-d4f9-49eb-99b9-102ecfb4eb6b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/sub-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-99c043"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78350f4a-ea9d-4c15-8cea-6fef30b3851d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/134a908a25e83dd88d19141c4e580f8cc9f4d8ced18683f7dc0809feb916a153"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/811c6aa686e6fd3aae4a1e16d092ae5828f662e10d1f6a6f96f2176576f4ae97"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f13ff9c62377fab0a42c1ccd88ce1d2f269395cbfcf7aeb4e7b45a38a4243076"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a6c67725392de720a42cd4f24638e628a258db344706a492ccb6b97f43714ac"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/daca38c3680644f0fd293174614e74ab2e83bcf3a327083f06af2e0f9edfafa6"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03fd644dfc840b070f83979fa5e54bae363bcdb7de2b8f643cbc84e1200d78be"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/661d9372b36d338097fff7383e609dd3a7edc462625ff13b0719973da55d006a"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/690f8a6f8f094664e30e3820510bf5353e28f0e9fd22c2869fdfab56fd3de316"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87bf143588ab503e021b9d9f0178963087e25fa53bc97fa7aac7b45877958a9a"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cad35ce8df88f2ed1d0e336fc4f6f5536b2cc7bfd4410fe76c7a1c2991a9774d"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e8e0346ec4ff197b35c2379be92a1e65fb93b065148852b395462da6def9cb9"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea7204868820cc552c0ecf8de412b83b78cff4757ec10162042528cf1c06aec0"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccb7c92075b954271d1c9b18c7910504c0be0f02efc3ab4861fe2c9b90976adf"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cca907d247467c853e3c96f0e631483ece014df61d8285c75ad0d13012aab80f"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6fd4b93e74b95dfa1b62a74247e2e51a5f56c140a054a6235028d9f64ee3ac3"} {"level":"info","ts":"2026-07-09T01:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f62810b90e262c5cbef1ba2258b1de8c371f9e221758816325d2ba16ebe07ee9"} {"level":"debug","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94"} {"level":"info","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94"} {"level":"info","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94"} {"level":"debug","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94"} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2"} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2"} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef"} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2"} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef"} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef"} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef"} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2"} {"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:33:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:33:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"} {"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"} {"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:33:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:33:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477"} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c"} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"debug","ts":"2026-07-09T01:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101"} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T01:34:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef"} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9"} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94"} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18"} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e"} {"level":"info","ts":"2026-07-09T01:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197"} {"level":"info","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41456","PortSpecifier":{"PortValue":41456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41456","PortSpecifier":{"PortValue":41456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560843,"nanos":87785654},"http":{"id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20cfe078-bf04-4da4-8a4a-04817dd0e437","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36360","PortSpecifier":{"PortValue":36360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36360","PortSpecifier":{"PortValue":36360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560843,"nanos":125969419},"http":{"id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fffa9b74-dad1-40b4-bad0-27befb1f2eb9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41466","PortSpecifier":{"PortValue":41466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","method":"POST","path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41466","PortSpecifier":{"PortValue":41466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560843,"nanos":170020914},"http":{"id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AWKDLDwvb6MiUjCQ_nkIApq7rr2aCNySA8O7N7eogGe55DC7mX4p3OaBHUvV"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AWKDLDwvb6MiUjCQ_nkIApq7rr2aCNySA8O7N7eogGe55DC7mX4p3OaBHUvV\"}"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","keyName":"e2e-rate-a-6f62ad","subscription":"e2e-rate-iso-a-6f62ad","tenant":"e2e-shared-a-88a238","userId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\",\"requestedSubscription\":\"e2e-rate-iso-a-6f62ad\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6f62ad","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6f62ad"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","keyName":"e2e-rate-a-6f62ad","selected_subscription":"e2e-rate-iso-a-6f62ad","selected_subscription_key":"ai-tenant-e2e-shared-a-88a238/e2e-rate-iso-a-6f62ad@ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6f62ad","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:34:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caa616f7-ce34-4583-b2d0-a40c6a9ec17f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41468","PortSpecifier":{"PortValue":41468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","method":"POST","path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41468","PortSpecifier":{"PortValue":41468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560844,"nanos":233108373},"http":{"id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AWKDLDwvb6MiUjCQ_nkIApq7rr2aCNySA8O7N7eogGe55DC7mX4p3OaBHUvV"} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AWKDLDwvb6MiUjCQ_nkIApq7rr2aCNySA8O7N7eogGe55DC7mX4p3OaBHUvV\"}"} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","keyName":"e2e-rate-a-6f62ad","subscription":"e2e-rate-iso-a-6f62ad","tenant":"e2e-shared-a-88a238","userId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\",\"requestedSubscription\":\"e2e-rate-iso-a-6f62ad\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6f62ad","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6f62ad"} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","keyName":"e2e-rate-a-6f62ad","selected_subscription":"e2e-rate-iso-a-6f62ad","selected_subscription_key":"ai-tenant-e2e-shared-a-88a238/e2e-rate-iso-a-6f62ad@ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6f62ad","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b62a1401-8231-4f65-b7e0-eb45227ac61a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41484","PortSpecifier":{"PortValue":41484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","method":"POST","path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41484","PortSpecifier":{"PortValue":41484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560845,"nanos":275000594},"http":{"id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AWKDLDwvb6MiUjCQ_nkIApq7rr2aCNySA8O7N7eogGe55DC7mX4p3OaBHUvV"} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AWKDLDwvb6MiUjCQ_nkIApq7rr2aCNySA8O7N7eogGe55DC7mX4p3OaBHUvV\"}"} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","keyName":"e2e-rate-a-6f62ad","subscription":"e2e-rate-iso-a-6f62ad","tenant":"e2e-shared-a-88a238","userId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\",\"requestedSubscription\":\"e2e-rate-iso-a-6f62ad\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6f62ad","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6f62ad"} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"21d35ec5-8a78-43a7-acbb-dd92a979ccf3","keyName":"e2e-rate-a-6f62ad","selected_subscription":"e2e-rate-iso-a-6f62ad","selected_subscription_key":"ai-tenant-e2e-shared-a-88a238/e2e-rate-iso-a-6f62ad@ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6f62ad","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71cfde44-a647-4d81-b6c9-b29e813d16ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"768d6414-bb4d-4f52-9272-1d7445250231","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48222","PortSpecifier":{"PortValue":48222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"768d6414-bb4d-4f52-9272-1d7445250231","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"768d6414-bb4d-4f52-9272-1d7445250231","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48222","PortSpecifier":{"PortValue":48222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560864,"nanos":458451631},"http":{"id":"768d6414-bb4d-4f52-9272-1d7445250231","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"768d6414-bb4d-4f52-9272-1d7445250231","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"768d6414-bb4d-4f52-9272-1d7445250231","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"768d6414-bb4d-4f52-9272-1d7445250231","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"768d6414-bb4d-4f52-9272-1d7445250231","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"768d6414-bb4d-4f52-9272-1d7445250231","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40460","PortSpecifier":{"PortValue":40460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40460","PortSpecifier":{"PortValue":40460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560864,"nanos":499571518},"http":{"id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d0364edd-2673-4364-aae2-02ff443dbd75","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"]}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57a1f0803780"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a68fd04b-d513-47ab-8ef0-24bfd3ae20f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d0364edd-2673-4364-aae2-02ff443dbd75","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d97010c-ba48-4fbf-bd09-f82717a6659f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48232","PortSpecifier":{"PortValue":48232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","method":"POST","path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48232","PortSpecifier":{"PortValue":48232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560864,"nanos":537670387},"http":{"id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SFpDB0qIya5DcGOW_SHNkFWqeGUK32utjQAwTkugaLrCMKrk4XEGEDcVSm13"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SFpDB0qIya5DcGOW_SHNkFWqeGUK32utjQAwTkugaLrCMKrk4XEGEDcVSm13\"}"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"15f53630-1d85-4cdf-9350-0d3161f764ba","keyName":"e2e-rate-a-d4ba1f","subscription":"e2e-rate-iso-a-d4ba1f","tenant":"e2e-shared-a-88a238","userId":"15f53630-1d85-4cdf-9350-0d3161f764ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\",\"requestedSubscription\":\"e2e-rate-iso-a-d4ba1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4ba1f","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4ba1f"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"15f53630-1d85-4cdf-9350-0d3161f764ba","keyName":"e2e-rate-a-d4ba1f","selected_subscription":"e2e-rate-iso-a-d4ba1f","selected_subscription_key":"ai-tenant-e2e-shared-a-88a238/e2e-rate-iso-a-d4ba1f@ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4ba1f","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc1c54f8-9965-4071-8dae-3af8e8810ed0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48248","PortSpecifier":{"PortValue":48248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"720d8479-ffd1-4650-bed8-676af64a73d4","method":"POST","path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48248","PortSpecifier":{"PortValue":48248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560865,"nanos":576910351},"http":{"id":"720d8479-ffd1-4650-bed8-676af64a73d4","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SFpDB0qIya5DcGOW_SHNkFWqeGUK32utjQAwTkugaLrCMKrk4XEGEDcVSm13"} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SFpDB0qIya5DcGOW_SHNkFWqeGUK32utjQAwTkugaLrCMKrk4XEGEDcVSm13\"}"} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"15f53630-1d85-4cdf-9350-0d3161f764ba","keyName":"e2e-rate-a-d4ba1f","subscription":"e2e-rate-iso-a-d4ba1f","tenant":"e2e-shared-a-88a238","userId":"15f53630-1d85-4cdf-9350-0d3161f764ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\",\"requestedSubscription\":\"e2e-rate-iso-a-d4ba1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4ba1f","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4ba1f"} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"15f53630-1d85-4cdf-9350-0d3161f764ba","keyName":"e2e-rate-a-d4ba1f","selected_subscription":"e2e-rate-iso-a-d4ba1f","selected_subscription_key":"ai-tenant-e2e-shared-a-88a238/e2e-rate-iso-a-d4ba1f@ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4ba1f","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:34:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"720d8479-ffd1-4650-bed8-676af64a73d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48264","PortSpecifier":{"PortValue":48264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","method":"POST","path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions","host":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48264","PortSpecifier":{"PortValue":48264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560866,"nanos":637012408},"http":{"id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","method":"POST","headers":{":authority":"e2e-shared-a-88a238.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SFpDB0qIya5DcGOW_SHNkFWqeGUK32utjQAwTkugaLrCMKrk4XEGEDcVSm13"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SFpDB0qIya5DcGOW_SHNkFWqeGUK32utjQAwTkugaLrCMKrk4XEGEDcVSm13\"}"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"15f53630-1d85-4cdf-9350-0d3161f764ba","keyName":"e2e-rate-a-d4ba1f","subscription":"e2e-rate-iso-a-d4ba1f","tenant":"e2e-shared-a-88a238","userId":"15f53630-1d85-4cdf-9350-0d3161f764ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\",\"requestedSubscription\":\"e2e-rate-iso-a-d4ba1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88a238.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4ba1f","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4ba1f"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"15f53630-1d85-4cdf-9350-0d3161f764ba","keyName":"e2e-rate-a-d4ba1f","selected_subscription":"e2e-rate-iso-a-d4ba1f","selected_subscription_key":"ai-tenant-e2e-shared-a-88a238/e2e-rate-iso-a-d4ba1f@ai-tenant-e2e-shared-a-88a238/rate-test-model-88a238","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88a238","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4ba1f","namespace":"ai-tenant-e2e-shared-a-88a238","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37d4fff0-d4e3-4ec7-a900-300b335580b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40462","PortSpecifier":{"PortValue":40462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","method":"POST","path":"/ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242/v1/completions","host":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40462","PortSpecifier":{"PortValue":40462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783560866,"nanos":689798042},"http":{"id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","method":"POST","headers":{":authority":"e2e-shared-b-52d242.apps.ad3a0029-d404-4b74-a10a-57a1f0803780.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XXFzDtjDBcMBqhk3_eDJy1VbheVwvFRITRSnqgDCD4uZ6PRgRn81AL7AbDVP"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XXFzDtjDBcMBqhk3_eDJy1VbheVwvFRITRSnqgDCD4uZ6PRgRn81AL7AbDVP\"}"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2832ee9-c53b-4bf9-9918-753904d4789d","keyName":"e2e-rate-b-d4ba1f","subscription":"e2e-rate-iso-b-d4ba1f","tenant":"e2e-shared-b-52d242","userId":"b2832ee9-c53b-4bf9-9918-753904d4789d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242\",\"requestedSubscription\":\"e2e-rate-iso-b-d4ba1f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-52d242.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-52d242","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d4ba1f","namespace":"ai-tenant-e2e-shared-b-52d242","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d4ba1f"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2832ee9-c53b-4bf9-9918-753904d4789d","keyName":"e2e-rate-b-d4ba1f","selected_subscription":"e2e-rate-iso-b-d4ba1f","selected_subscription_key":"ai-tenant-e2e-shared-b-52d242/e2e-rate-iso-b-d4ba1f@ai-tenant-e2e-shared-b-52d242/rate-test-model-52d242","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-52d242","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d4ba1f","namespace":"ai-tenant-e2e-shared-b-52d242","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T01:34:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c9426f1-cc5e-4c0a-a9bd-16792b955030","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7848111b6dc36e9fe675655dcdbf07fdde27bc4c344ebd4e702ec1618d35a101"} {"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f802bfaaf5bc616c104a9e4df84fec86ea036e061e72a1cab4efb30d6ec822e"} {"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2081974af890cb4a79aad034d3eaf7d48c62606e673b4b6ce5e7b4fca6ff3a9"} {"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7687b987a86a1755c996b9d99415ca54bc10c9748c510d416efadc588d3ed39c"} {"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eac3d848a210a90c82f9ca8b071bc472adf0e5d47f4aca358443a38c86e38bd3"} {"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f4f1c86c0786b6dda8bbace1705edcc38d7e833f6b402ec67622696d9c1e1ef"} {"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/748896a1656278466ee8ba1f87a25f3dea8e4cd86b7c0a007e777e29105e6c29"} {"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a1a23ce166092002e1c75ee44463faf68d2332e59cc3eb069b4021bf73f9d94"} {"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/037be5b36cee8540aa5d5092f63526337c7339c83c9b3d9e8798c26599f8e6ac"} {"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a05da3c923338ea08c6ee1c3bc63fcbc38057b48610f275ae0b2b56e046fe46b"} {"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fc67e676904aa5090ee6f84b8ba582d9f93ecfc95bff882be1f55f9285dc3e2"} {"level":"info","ts":"2026-07-09T01:34:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35d2d05ea4ddc6af40a42e32199c56aac8a4325c443bdf6821fe4ffc8c955d42"} {"level":"info","ts":"2026-07-09T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2691dff5e3d9c6d0fee4958fbab503d99586f2e3869807d6aed2aa160ce43477"} {"level":"info","ts":"2026-07-09T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f609cd7c97e42491eb1bab68ee1e36797655eb1c799f96995ef8eda0c4dc54f"} {"level":"info","ts":"2026-07-09T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e18826548ea3e9eeb1bbc75b21e534c23bbef70c41f86b8ced3ccad4c316ef2c"} {"level":"info","ts":"2026-07-09T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31d1345d2fafcb07621adfaef20dcc374b547f878beae73468be3ed90007dccd"} {"level":"info","ts":"2026-07-09T01:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a423e07f567811526ae5f615191ebadf47703d23d13c740dc64934d50924c197"} {"level":"info","ts":"2026-07-09T01:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1efd0d1ac38bf11bb01bdc2a1693753fba2b5a6497894a9415dd3bf7f18001f1"} {"level":"info","ts":"2026-07-09T01:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff1733122afd99d6e88bd0b7b21866389139c189fa21b2af52f7897bf3088775"} {"level":"info","ts":"2026-07-09T01:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c62b1503ba5d90666a16f6bdc5990540f8a395785b9a6f38c210a3cce344e88"} {"level":"info","ts":"2026-07-09T01:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02aed894ca257b2bd74ef09bd177b39acd64c682fcc58607794bddaac6c37145"} {"level":"info","ts":"2026-07-09T01:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdd3d1656dcaf156ed5dc2d7c9350089d2d8e95437c132be21509cfb10f259c9"} {"level":"info","ts":"2026-07-09T01:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1158254fba0e02dc0927f00d13595262fd3dbda4a7a5407cfa36556d601764e4"} {"level":"info","ts":"2026-07-09T01:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ad607e475f97b150c32dba41f8785774b748c7dacec2bef02a95b7a1b2f6a18"}