--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3b031e2-447b-4d6c-b060-016e5e370e45","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36406","PortSpecifier":{"PortValue":36406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36406","PortSpecifier":{"PortValue":36406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237209,"nanos":695644220},"http":{"id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/auth-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c84079a-9ecf-4302-9a51-e7a0557295c8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96fb341e-f93a-4b15-b286-64a23444a397","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36420","PortSpecifier":{"PortValue":36420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96fb341e-f93a-4b15-b286-64a23444a397","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96fb341e-f93a-4b15-b286-64a23444a397","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36420","PortSpecifier":{"PortValue":36420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237209,"nanos":743664630},"http":{"id":"96fb341e-f93a-4b15-b286-64a23444a397","method":"GET","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96fb341e-f93a-4b15-b286-64a23444a397","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ui5dNSl9qNMaXsrO_vqD1j066FMYa60RM0e2Azf5f2Obch4w4w29dRBmAP2o"} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96fb341e-f93a-4b15-b286-64a23444a397","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ui5dNSl9qNMaXsrO_vqD1j066FMYa60RM0e2Azf5f2Obch4w4w29dRBmAP2o\"}"} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96fb341e-f93a-4b15-b286-64a23444a397","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96fb341e-f93a-4b15-b286-64a23444a397","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96fb341e-f93a-4b15-b286-64a23444a397","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"96fb341e-f93a-4b15-b286-64a23444a397","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96fb341e-f93a-4b15-b286-64a23444a397","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-28T11:13:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96fb341e-f93a-4b15-b286-64a23444a397","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-28T11:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"info","ts":"2026-07-28T11:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"info","ts":"2026-07-28T11:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"info","ts":"2026-07-28T11:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"info","ts":"2026-07-28T11:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"info","ts":"2026-07-28T11:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:13:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"info","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36422","PortSpecifier":{"PortValue":36422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36422","PortSpecifier":{"PortValue":36422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237246,"nanos":533647761},"http":{"id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/auth-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea8ad25d-2c6b-4964-b8b5-150ca5290cdc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44424","PortSpecifier":{"PortValue":44424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72735d08-a647-45f6-a5a5-c0df461721d4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44424","PortSpecifier":{"PortValue":44424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237246,"nanos":584729945},"http":{"id":"72735d08-a647-45f6-a5a5-c0df461721d4","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/auth-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72735d08-a647-45f6-a5a5-c0df461721d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36428","PortSpecifier":{"PortValue":36428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78090e58-4f22-4cb5-a96e-94234631f1f2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36428","PortSpecifier":{"PortValue":36428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237246,"nanos":633014220},"http":{"id":"78090e58-4f22-4cb5-a96e-94234631f1f2","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/auth-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78090e58-4f22-4cb5-a96e-94234631f1f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44434","PortSpecifier":{"PortValue":44434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44434","PortSpecifier":{"PortValue":44434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237246,"nanos":669929950},"http":{"id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/auth-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:14:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bb4e7f3-6f12-4735-9ed7-738c0d865b86","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:14:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"info","ts":"2026-07-28T11:14:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:14:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:14:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:14:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"info","ts":"2026-07-28T11:14:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:14:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"info","ts":"2026-07-28T11:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"info","ts":"2026-07-28T11:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"info","ts":"2026-07-28T11:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"info","ts":"2026-07-28T11:14:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"debug","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33122","PortSpecifier":{"PortValue":33122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33122","PortSpecifier":{"PortValue":33122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237284,"nanos":936708961},"http":{"id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/auth-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a09fc8e-d660-45c1-9f4e-795b69fdddce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35372","PortSpecifier":{"PortValue":35372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35372","PortSpecifier":{"PortValue":35372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237284,"nanos":977283529},"http":{"id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/auth-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:14:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6b45f73-c701-4903-8666-8dc97b5b32a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16d57900-b630-43d3-a655-6cb780d5cede","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35378","PortSpecifier":{"PortValue":35378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16d57900-b630-43d3-a655-6cb780d5cede","method":"GET","path":"/maas-api/v1/api-keys/1ed78fd3-132e-4cfd-a1cc-36a44c7177c3","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16d57900-b630-43d3-a655-6cb780d5cede","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35378","PortSpecifier":{"PortValue":35378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237285,"nanos":24250058},"http":{"id":"16d57900-b630-43d3-a655-6cb780d5cede","method":"GET","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1ed78fd3-132e-4cfd-a1cc-36a44c7177c3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16d57900-b630-43d3-a655-6cb780d5cede","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16d57900-b630-43d3-a655-6cb780d5cede","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16d57900-b630-43d3-a655-6cb780d5cede","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1ed78fd3-132e-4cfd-a1cc-36a44c7177c3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16d57900-b630-43d3-a655-6cb780d5cede","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16d57900-b630-43d3-a655-6cb780d5cede","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16d57900-b630-43d3-a655-6cb780d5cede","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/auth-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16d57900-b630-43d3-a655-6cb780d5cede","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16d57900-b630-43d3-a655-6cb780d5cede","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16d57900-b630-43d3-a655-6cb780d5cede","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16d57900-b630-43d3-a655-6cb780d5cede","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16d57900-b630-43d3-a655-6cb780d5cede","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33124","PortSpecifier":{"PortValue":33124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","method":"GET","path":"/maas-api/v1/api-keys/1ed78fd3-132e-4cfd-a1cc-36a44c7177c3","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33124","PortSpecifier":{"PortValue":33124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237285,"nanos":59596159},"http":{"id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","method":"GET","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1ed78fd3-132e-4cfd-a1cc-36a44c7177c3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1ed78fd3-132e-4cfd-a1cc-36a44c7177c3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/auth-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ab2523d-6737-41d2-ad55-ca55003fa9b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"info","ts":"2026-07-28T11:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"info","ts":"2026-07-28T11:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"info","ts":"2026-07-28T11:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"info","ts":"2026-07-28T11:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"info","ts":"2026-07-28T11:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"info","ts":"2026-07-28T11:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"debug","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"debug","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"debug","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"debug","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"error","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34046","PortSpecifier":{"PortValue":34046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34046","PortSpecifier":{"PortValue":34046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237325,"nanos":585352929},"http":{"id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/auth-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28da9a5a-1aa9-4687-8c55-26f7fb919b00","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60184","PortSpecifier":{"PortValue":60184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7eee082-3400-4111-88f1-0725f3b87e06","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60184","PortSpecifier":{"PortValue":60184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237325,"nanos":625143328},"http":{"id":"e7eee082-3400-4111-88f1-0725f3b87e06","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/auth-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7eee082-3400-4111-88f1-0725f3b87e06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34048","PortSpecifier":{"PortValue":34048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34048","PortSpecifier":{"PortValue":34048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237325,"nanos":675704189},"http":{"id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w8IOABO3tEhcewmJ_dDZl4tt3vIvyO6fwpvGYejcmJ8QjCEzrZYYYCKEhxeV"} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w8IOABO3tEhcewmJ_dDZl4tt3vIvyO6fwpvGYejcmJ8QjCEzrZYYYCKEhxeV\"}"} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56aac82f-c59d-4c43-99c2-5b38f9da3c19","keyName":"e2e-auth-iso-a-a10437","subscription":"e2e-auth-iso-e77c32","tenant":"e2e-shared-a-4cda06","userId":"56aac82f-c59d-4c43-99c2-5b38f9da3c19","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/auth-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e77c32"} {"level":"info","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:15:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d1a17a1-360c-44d9-988d-3ba3cec67111","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7362f68cb7e2e6524f97dc6faa100a66b0848cf034919031a75193d2eba600c0"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff9eae937afd0ef24796fdb28a702156bb8de5da7b45e7bd26132484409b887"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6ecce3dfaa631e61c216601f308460e42d8f79768529e82a267898fcfa97c74"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b9ee11ab0737434199726d2f883d27cef88315985e76fcb095cac799bb7ce4b"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b82813d85dccd69183b05bda5e669cac763063c8d26988430c0847e67fe5c2d"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcc695a9e4facd54c17d00d2617f145656e6c888f2f27e0f5e9bc93c280d8e42"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dcec59fa28e4b7e7637e701f346a8902759d651b171677e8379a58c94396d9f"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d644d5ca82ba420efe7362e81957bb134ca3dba62bcdf89b97b6018ae92221e9"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8673dd1cbcc1424f5afd1350bf3c9014ea60c885e2f299d974e7c96a90c01698"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15025372426cb48db0aa2480fb90c67e5f4e2477238f2b043b93783e74414256"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42c02edf9e259a30137d181430f8f94211eacba7d695f70f3499d6246b0f2a64"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de2b66ecd373879505578c78ece2b89241e51bbaf079e48da71ceec384c37e54"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d25e159210fc770659c888d759e6962003e2f1848417ce0e968d7807df2f4221"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e99107aea8f3cfa0743a477a6c69d3fb2e7388beb3b5d29a2a2271706e76403b"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc4f68203b0f6bf3f44678f316844e732921ee7dc7c65230c45f7206d5a6dabc"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ee584b4af03f26f6c502b2f078dd263d56de9aa624ec52dbecb291005c32a1f"} {"level":"info","ts":"2026-07-28T11:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255"} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6"} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9339e2fbedd68ab10669869c15b2a37c3a499981b2f54216a6c5223ef4f6defe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9339e2fbedd68ab10669869c15b2a37c3a499981b2f54216a6c5223ef4f6defe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9339e2fbedd68ab10669869c15b2a37c3a499981b2f54216a6c5223ef4f6defe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9339e2fbedd68ab10669869c15b2a37c3a499981b2f54216a6c5223ef4f6defe"} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9339e2fbedd68ab10669869c15b2a37c3a499981b2f54216a6c5223ef4f6defe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9339e2fbedd68ab10669869c15b2a37c3a499981b2f54216a6c5223ef4f6defe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9339e2fbedd68ab10669869c15b2a37c3a499981b2f54216a6c5223ef4f6defe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9339e2fbedd68ab10669869c15b2a37c3a499981b2f54216a6c5223ef4f6defe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9339e2fbedd68ab10669869c15b2a37c3a499981b2f54216a6c5223ef4f6defe"} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9339e2fbedd68ab10669869c15b2a37c3a499981b2f54216a6c5223ef4f6defe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"info","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9339e2fbedd68ab10669869c15b2a37c3a499981b2f54216a6c5223ef4f6defe"} {"level":"error","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"error","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ea422b22a99df84a1173d3fed2d44e93753c856952b52dc7e2baa5584c9939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ea422b22a99df84a1173d3fed2d44e93753c856952b52dc7e2baa5584c9939","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ea422b22a99df84a1173d3fed2d44e93753c856952b52dc7e2baa5584c9939"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ea422b22a99df84a1173d3fed2d44e93753c856952b52dc7e2baa5584c9939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ea422b22a99df84a1173d3fed2d44e93753c856952b52dc7e2baa5584c9939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ea422b22a99df84a1173d3fed2d44e93753c856952b52dc7e2baa5584c9939","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ea422b22a99df84a1173d3fed2d44e93753c856952b52dc7e2baa5584c9939"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ea422b22a99df84a1173d3fed2d44e93753c856952b52dc7e2baa5584c9939","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ea422b22a99df84a1173d3fed2d44e93753c856952b52dc7e2baa5584c9939"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc"} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc"} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4231f12c17fab51e949e0172ff50502b8b35432f09a88384bfc548a873ba6c75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4231f12c17fab51e949e0172ff50502b8b35432f09a88384bfc548a873ba6c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b93ae2d8b295942970df1705182f74981007e18f2d65c837bd95d71436c406a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4231f12c17fab51e949e0172ff50502b8b35432f09a88384bfc548a873ba6c75"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b93ae2d8b295942970df1705182f74981007e18f2d65c837bd95d71436c406a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4231f12c17fab51e949e0172ff50502b8b35432f09a88384bfc548a873ba6c75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4231f12c17fab51e949e0172ff50502b8b35432f09a88384bfc548a873ba6c75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4231f12c17fab51e949e0172ff50502b8b35432f09a88384bfc548a873ba6c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9655cda9b593411c69b581a7b71f9e7780bb6bf38a45af62f4571142909a7c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b93ae2d8b295942970df1705182f74981007e18f2d65c837bd95d71436c406a"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9655cda9b593411c69b581a7b71f9e7780bb6bf38a45af62f4571142909a7c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b93ae2d8b295942970df1705182f74981007e18f2d65c837bd95d71436c406a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b93ae2d8b295942970df1705182f74981007e18f2d65c837bd95d71436c406a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4231f12c17fab51e949e0172ff50502b8b35432f09a88384bfc548a873ba6c75"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b93ae2d8b295942970df1705182f74981007e18f2d65c837bd95d71436c406a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4231f12c17fab51e949e0172ff50502b8b35432f09a88384bfc548a873ba6c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9655cda9b593411c69b581a7b71f9e7780bb6bf38a45af62f4571142909a7c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9655cda9b593411c69b581a7b71f9e7780bb6bf38a45af62f4571142909a7c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b93ae2d8b295942970df1705182f74981007e18f2d65c837bd95d71436c406a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9655cda9b593411c69b581a7b71f9e7780bb6bf38a45af62f4571142909a7c61","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9655cda9b593411c69b581a7b71f9e7780bb6bf38a45af62f4571142909a7c61"} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9655cda9b593411c69b581a7b71f9e7780bb6bf38a45af62f4571142909a7c61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9655cda9b593411c69b581a7b71f9e7780bb6bf38a45af62f4571142909a7c61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9655cda9b593411c69b581a7b71f9e7780bb6bf38a45af62f4571142909a7c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b93ae2d8b295942970df1705182f74981007e18f2d65c837bd95d71436c406a"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9655cda9b593411c69b581a7b71f9e7780bb6bf38a45af62f4571142909a7c61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4231f12c17fab51e949e0172ff50502b8b35432f09a88384bfc548a873ba6c75"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c97efcbd4233fa11813ed35a6c6a91517fdf3f3ce73bb8a9e7782a5732a2f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c97efcbd4233fa11813ed35a6c6a91517fdf3f3ce73bb8a9e7782a5732a2f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c97efcbd4233fa11813ed35a6c6a91517fdf3f3ce73bb8a9e7782a5732a2f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c97efcbd4233fa11813ed35a6c6a91517fdf3f3ce73bb8a9e7782a5732a2f85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9655cda9b593411c69b581a7b71f9e7780bb6bf38a45af62f4571142909a7c61"} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c97efcbd4233fa11813ed35a6c6a91517fdf3f3ce73bb8a9e7782a5732a2f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c97efcbd4233fa11813ed35a6c6a91517fdf3f3ce73bb8a9e7782a5732a2f85"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c97efcbd4233fa11813ed35a6c6a91517fdf3f3ce73bb8a9e7782a5732a2f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c97efcbd4233fa11813ed35a6c6a91517fdf3f3ce73bb8a9e7782a5732a2f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c97efcbd4233fa11813ed35a6c6a91517fdf3f3ce73bb8a9e7782a5732a2f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c97efcbd4233fa11813ed35a6c6a91517fdf3f3ce73bb8a9e7782a5732a2f85"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677bd719735b7b5a05e69463ec8503b41e69c4ab882f77ff83a8d2efef0843d8"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc86c84071bf27c20d6951e626cf89fb93d17392483280aeb0bde9dd4c506097"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2381440c67714fae44e7f74427d30ab48018e3eacbbacf97bf15ee2a8d83d38f"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c97efcbd4233fa11813ed35a6c6a91517fdf3f3ce73bb8a9e7782a5732a2f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677bd719735b7b5a05e69463ec8503b41e69c4ab882f77ff83a8d2efef0843d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677bd719735b7b5a05e69463ec8503b41e69c4ab882f77ff83a8d2efef0843d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677bd719735b7b5a05e69463ec8503b41e69c4ab882f77ff83a8d2efef0843d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677bd719735b7b5a05e69463ec8503b41e69c4ab882f77ff83a8d2efef0843d8"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc86c84071bf27c20d6951e626cf89fb93d17392483280aeb0bde9dd4c506097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc86c84071bf27c20d6951e626cf89fb93d17392483280aeb0bde9dd4c506097"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc86c84071bf27c20d6951e626cf89fb93d17392483280aeb0bde9dd4c506097","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2381440c67714fae44e7f74427d30ab48018e3eacbbacf97bf15ee2a8d83d38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2381440c67714fae44e7f74427d30ab48018e3eacbbacf97bf15ee2a8d83d38f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc86c84071bf27c20d6951e626cf89fb93d17392483280aeb0bde9dd4c506097"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2381440c67714fae44e7f74427d30ab48018e3eacbbacf97bf15ee2a8d83d38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2381440c67714fae44e7f74427d30ab48018e3eacbbacf97bf15ee2a8d83d38f"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677bd719735b7b5a05e69463ec8503b41e69c4ab882f77ff83a8d2efef0843d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc86c84071bf27c20d6951e626cf89fb93d17392483280aeb0bde9dd4c506097","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2381440c67714fae44e7f74427d30ab48018e3eacbbacf97bf15ee2a8d83d38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f"} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:16:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f"} {"level":"error","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:16:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51552","PortSpecifier":{"PortValue":51552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"615a232e-fdd8-4718-9c2c-bae3419994e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51552","PortSpecifier":{"PortValue":51552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237426,"nanos":437480927},"http":{"id":"615a232e-fdd8-4718-9c2c-bae3419994e6","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/sub-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"615a232e-fdd8-4718-9c2c-bae3419994e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51332","PortSpecifier":{"PortValue":51332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51332","PortSpecifier":{"PortValue":51332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237426,"nanos":480501944},"http":{"id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/sub-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"604c40ec-2a90-9e02-9ef6-98f0d93f8295","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51566","PortSpecifier":{"PortValue":51566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51566","PortSpecifier":{"PortValue":51566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237426,"nanos":522863625},"http":{"id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","method":"GET","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oasvXGfPItdyPcLq_BlX5Xc12vQ4xaC3BDjjNUbkM4YiW1iKYQbL6XQ6dbBM"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oasvXGfPItdyPcLq_BlX5Xc12vQ4xaC3BDjjNUbkM4YiW1iKYQbL6XQ6dbBM\"}"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c98ca90e-6638-4ff4-a805-ff1991135f46","keyName":"e2e-sub-iso-224988","subscription":"e2e-a-only-759ae1","tenant":"e2e-shared-a-4cda06","userId":"c98ca90e-6638-4ff4-a805-ff1991135f46","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/sub-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-759ae1"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af728a87-e8d2-4d78-b102-7a49f1db02cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51348","PortSpecifier":{"PortValue":51348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a435085-73fa-4a89-a847-29e439e5c4c5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51348","PortSpecifier":{"PortValue":51348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237426,"nanos":565197199},"http":{"id":"9a435085-73fa-4a89-a847-29e439e5c4c5","method":"GET","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KzmJJO8T0RgyAShh_Xu8uZCA3Mg1exULDT98DhI8G87yQ4toxCyU2aLskKDx"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KzmJJO8T0RgyAShh_Xu8uZCA3Mg1exULDT98DhI8G87yQ4toxCyU2aLskKDx\"}"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04db4deb-2f96-46f3-9881-bd2fee560f01","keyName":"e2e-sub-iso-ca0fb7","subscription":"e2e-b-only-759ae1","tenant":"e2e-shared-b-683bdc","userId":"04db4deb-2f96-46f3-9881-bd2fee560f01","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/sub-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-759ae1"} {"level":"info","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:17:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a435085-73fa-4a89-a847-29e439e5c4c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33750","PortSpecifier":{"PortValue":33750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33750","PortSpecifier":{"PortValue":33750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237446,"nanos":947775586},"http":{"id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/sub-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:17:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4af32b92-8fe6-4d2f-b8bf-80bb4db9f102","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58522","PortSpecifier":{"PortValue":58522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58522","PortSpecifier":{"PortValue":58522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237447,"nanos":1351547},"http":{"id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/sub-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1acbc0e8-60c0-4481-9102-7cc1c1afc944","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33752","PortSpecifier":{"PortValue":33752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33752","PortSpecifier":{"PortValue":33752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237447,"nanos":51111679},"http":{"id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WhMEHlkLRqpFcOpS_fpUgVFUwn2sEEQanjrUEpNef5orWFQT64V5tH0PL7mx"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WhMEHlkLRqpFcOpS_fpUgVFUwn2sEEQanjrUEpNef5orWFQT64V5tH0PL7mx\"}"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2fd0d13e-bb80-4f29-8d39-906acfecf046","keyName":"e2e-sub-iso-07ddf4","subscription":"e2e-shared-sub-d47869","tenant":"e2e-shared-a-4cda06","userId":"2fd0d13e-bb80-4f29-8d39-906acfecf046","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/sub-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d47869"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6147dcf2-712d-4145-b3e9-5b9554077ce5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58538","PortSpecifier":{"PortValue":58538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58538","PortSpecifier":{"PortValue":58538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237447,"nanos":84831411},"http":{"id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VCGWtyCxAnU5xex7_sG4IrtjSCZ54BTZYuIBJkN5Y3s9BsEPcKWrT2zFaqhK"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VCGWtyCxAnU5xex7_sG4IrtjSCZ54BTZYuIBJkN5Y3s9BsEPcKWrT2zFaqhK\"}"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d8472cf-16d4-4aa4-9028-bc9b4a9585ad","keyName":"e2e-sub-iso-96a291","subscription":"e2e-shared-sub-d47869","tenant":"e2e-shared-b-683bdc","userId":"6d8472cf-16d4-4aa4-9028-bc9b4a9585ad","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/sub-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d47869"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:17:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fa801db-b84f-4d52-b88f-829e6a4a81ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:17:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"} {"level":"info","ts":"2026-07-28T11:17:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc86c84071bf27c20d6951e626cf89fb93d17392483280aeb0bde9dd4c506097"} {"level":"info","ts":"2026-07-28T11:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9655cda9b593411c69b581a7b71f9e7780bb6bf38a45af62f4571142909a7c61"} {"level":"info","ts":"2026-07-28T11:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2381440c67714fae44e7f74427d30ab48018e3eacbbacf97bf15ee2a8d83d38f"} {"level":"info","ts":"2026-07-28T11:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c8675a5808fef15e7526ab2f726fb7bf998a361cf695ef1f8194ccce2ff749f"} {"level":"info","ts":"2026-07-28T11:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9339e2fbedd68ab10669869c15b2a37c3a499981b2f54216a6c5223ef4f6defe"} {"level":"info","ts":"2026-07-28T11:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4231f12c17fab51e949e0172ff50502b8b35432f09a88384bfc548a873ba6c75"} {"level":"info","ts":"2026-07-28T11:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60ff61444eabaca086a7e7c15f015d7b1518b53795b6e7786456efce3ad14fcb"} {"level":"info","ts":"2026-07-28T11:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"} {"level":"info","ts":"2026-07-28T11:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34ea422b22a99df84a1173d3fed2d44e93753c856952b52dc7e2baa5584c9939"} {"level":"info","ts":"2026-07-28T11:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b74a9c8e65448f7ac92950663961d1939f1435ec6967289d0bf280d9b067efc"} {"level":"info","ts":"2026-07-28T11:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b93ae2d8b295942970df1705182f74981007e18f2d65c837bd95d71436c406a"} {"level":"info","ts":"2026-07-28T11:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec98c839795029d4283289eb3abc2c207b19e5199ad00326b76572ef39087373"} {"level":"info","ts":"2026-07-28T11:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/677bd719735b7b5a05e69463ec8503b41e69c4ab882f77ff83a8d2efef0843d8"} {"level":"info","ts":"2026-07-28T11:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9eb9843072badb12c7af00818d1d9f18751b89b5ad719f4f0247a37e258d5fc0"} {"level":"info","ts":"2026-07-28T11:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3626590eeab9e74252ac4d960488f1eac7ec9adce59b003553fdfd22bd70d255"} {"level":"info","ts":"2026-07-28T11:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1db9668ca6e1a7014b463e92b9b9d19f832b0f487dd904d384d527b85bcd37d6"} {"level":"info","ts":"2026-07-28T11:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22"} {"level":"info","ts":"2026-07-28T11:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"} {"level":"info","ts":"2026-07-28T11:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c97efcbd4233fa11813ed35a6c6a91517fdf3f3ce73bb8a9e7782a5732a2f85"} {"level":"debug","ts":"2026-07-28T11:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"debug","ts":"2026-07-28T11:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"debug","ts":"2026-07-28T11:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9"} {"level":"error","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186"} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71743290ec8bacd298592e72b6ff6dde749fa3ab4ee167d4aecb0d98c56b55a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71743290ec8bacd298592e72b6ff6dde749fa3ab4ee167d4aecb0d98c56b55a"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71743290ec8bacd298592e72b6ff6dde749fa3ab4ee167d4aecb0d98c56b55a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572d7009c5c45cfb65a1817d11e57dc31a156e30a8225b3721afb726c8f10ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572d7009c5c45cfb65a1817d11e57dc31a156e30a8225b3721afb726c8f10ce5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71743290ec8bacd298592e72b6ff6dde749fa3ab4ee167d4aecb0d98c56b55a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f71743290ec8bacd298592e72b6ff6dde749fa3ab4ee167d4aecb0d98c56b55a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572d7009c5c45cfb65a1817d11e57dc31a156e30a8225b3721afb726c8f10ce5"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71743290ec8bacd298592e72b6ff6dde749fa3ab4ee167d4aecb0d98c56b55a"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71743290ec8bacd298592e72b6ff6dde749fa3ab4ee167d4aecb0d98c56b55a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71743290ec8bacd298592e72b6ff6dde749fa3ab4ee167d4aecb0d98c56b55a"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"572d7009c5c45cfb65a1817d11e57dc31a156e30a8225b3721afb726c8f10ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["572d7009c5c45cfb65a1817d11e57dc31a156e30a8225b3721afb726c8f10ce5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c33638ee771b8de68039f0ac9c8e4e7a223d97419310f8fe67c77ffb001e21b5"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"572d7009c5c45cfb65a1817d11e57dc31a156e30a8225b3721afb726c8f10ce5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71743290ec8bacd298592e72b6ff6dde749fa3ab4ee167d4aecb0d98c56b55a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1d03e6397768fa29f9ca97648dba966ccf5b192c26526db3baa9524bc545664"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/572d7009c5c45cfb65a1817d11e57dc31a156e30a8225b3721afb726c8f10ce5"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c33638ee771b8de68039f0ac9c8e4e7a223d97419310f8fe67c77ffb001e21b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c33638ee771b8de68039f0ac9c8e4e7a223d97419310f8fe67c77ffb001e21b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6e8406936c38c2253fd40f0a31ff711f554f0b223ca1b4f2309f72958329808"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c33638ee771b8de68039f0ac9c8e4e7a223d97419310f8fe67c77ffb001e21b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1d03e6397768fa29f9ca97648dba966ccf5b192c26526db3baa9524bc545664","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1d03e6397768fa29f9ca97648dba966ccf5b192c26526db3baa9524bc545664"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb5735ab3189fda0ecb12733325e9b359b65fee2d855a23ee7c5028dcc0e15ba"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1d03e6397768fa29f9ca97648dba966ccf5b192c26526db3baa9524bc545664","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"572d7009c5c45cfb65a1817d11e57dc31a156e30a8225b3721afb726c8f10ce5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1081bdbaa031ca1d8527bd5e0c8e8880e7fa5c7fcbdf310fda508a4bad05a168"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c33638ee771b8de68039f0ac9c8e4e7a223d97419310f8fe67c77ffb001e21b5"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b8d7318191d7c8ab847859d568df0e91b62a97ca32f3d580d303d8dd5e0bd59"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1d03e6397768fa29f9ca97648dba966ccf5b192c26526db3baa9524bc545664"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6e8406936c38c2253fd40f0a31ff711f554f0b223ca1b4f2309f72958329808","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6e8406936c38c2253fd40f0a31ff711f554f0b223ca1b4f2309f72958329808"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1d40704d0bab10ec4cdcd75600717cbb51295fca76a2396856daf03239cf2c"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6e8406936c38c2253fd40f0a31ff711f554f0b223ca1b4f2309f72958329808","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb5735ab3189fda0ecb12733325e9b359b65fee2d855a23ee7c5028dcc0e15ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb5735ab3189fda0ecb12733325e9b359b65fee2d855a23ee7c5028dcc0e15ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86162ad661f0c29b175a6a5b77d2d9007f5f8659bf159e9643fca74d15eda652"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb5735ab3189fda0ecb12733325e9b359b65fee2d855a23ee7c5028dcc0e15ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1081bdbaa031ca1d8527bd5e0c8e8880e7fa5c7fcbdf310fda508a4bad05a168","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1081bdbaa031ca1d8527bd5e0c8e8880e7fa5c7fcbdf310fda508a4bad05a168"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6e8406936c38c2253fd40f0a31ff711f554f0b223ca1b4f2309f72958329808"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1081bdbaa031ca1d8527bd5e0c8e8880e7fa5c7fcbdf310fda508a4bad05a168","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c33638ee771b8de68039f0ac9c8e4e7a223d97419310f8fe67c77ffb001e21b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b8d7318191d7c8ab847859d568df0e91b62a97ca32f3d580d303d8dd5e0bd59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b8d7318191d7c8ab847859d568df0e91b62a97ca32f3d580d303d8dd5e0bd59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb5735ab3189fda0ecb12733325e9b359b65fee2d855a23ee7c5028dcc0e15ba"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1081bdbaa031ca1d8527bd5e0c8e8880e7fa5c7fcbdf310fda508a4bad05a168"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b8d7318191d7c8ab847859d568df0e91b62a97ca32f3d580d303d8dd5e0bd59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b8d7318191d7c8ab847859d568df0e91b62a97ca32f3d580d303d8dd5e0bd59"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1d03e6397768fa29f9ca97648dba966ccf5b192c26526db3baa9524bc545664","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1d40704d0bab10ec4cdcd75600717cbb51295fca76a2396856daf03239cf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e1d40704d0bab10ec4cdcd75600717cbb51295fca76a2396856daf03239cf2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e1d40704d0bab10ec4cdcd75600717cbb51295fca76a2396856daf03239cf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86162ad661f0c29b175a6a5b77d2d9007f5f8659bf159e9643fca74d15eda652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86162ad661f0c29b175a6a5b77d2d9007f5f8659bf159e9643fca74d15eda652"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1d40704d0bab10ec4cdcd75600717cbb51295fca76a2396856daf03239cf2c"} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86162ad661f0c29b175a6a5b77d2d9007f5f8659bf159e9643fca74d15eda652","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86162ad661f0c29b175a6a5b77d2d9007f5f8659bf159e9643fca74d15eda652"} {"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6e8406936c38c2253fd40f0a31ff711f554f0b223ca1b4f2309f72958329808","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb5735ab3189fda0ecb12733325e9b359b65fee2d855a23ee7c5028dcc0e15ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1081bdbaa031ca1d8527bd5e0c8e8880e7fa5c7fcbdf310fda508a4bad05a168","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8d7318191d7c8ab847859d568df0e91b62a97ca32f3d580d303d8dd5e0bd59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1d40704d0bab10ec4cdcd75600717cbb51295fca76a2396856daf03239cf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86162ad661f0c29b175a6a5b77d2d9007f5f8659bf159e9643fca74d15eda652","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"} {"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"} {"level":"info","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51326","PortSpecifier":{"PortValue":51326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51326","PortSpecifier":{"PortValue":51326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237545,"nanos":331103968},"http":{"id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41670","PortSpecifier":{"PortValue":41670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41670","PortSpecifier":{"PortValue":41670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237545,"nanos":381375238},"http":{"id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51330","PortSpecifier":{"PortValue":51330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","method":"POST","path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51330","PortSpecifier":{"PortValue":51330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237545,"nanos":457467595},"http":{"id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gxM0isQea28klxUb_EjtVLOIV8ItwuHL3VepOeQMfQV39yWxBuZK3j17zHQm"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gxM0isQea28klxUb_EjtVLOIV8ItwuHL3VepOeQMfQV39yWxBuZK3j17zHQm\"}"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b47e18e1-6906-4e33-abe7-2246017b23f9","keyName":"e2e-rate-a-b1d7a1","subscription":"e2e-rate-iso-a-b1d7a1","tenant":"e2e-shared-a-4cda06","userId":"b47e18e1-6906-4e33-abe7-2246017b23f9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\",\"requestedSubscription\":\"e2e-rate-iso-a-b1d7a1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d7a1","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1d7a1"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b47e18e1-6906-4e33-abe7-2246017b23f9","keyName":"e2e-rate-a-b1d7a1","selected_subscription":"e2e-rate-iso-a-b1d7a1","selected_subscription_key":"ai-tenant-e2e-shared-a-4cda06/e2e-rate-iso-a-b1d7a1@ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d7a1","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51340","PortSpecifier":{"PortValue":51340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fc08189-3a97-4669-8a83-ada3d28b3720","method":"POST","path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51340","PortSpecifier":{"PortValue":51340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237546,"nanos":555137794},"http":{"id":"6fc08189-3a97-4669-8a83-ada3d28b3720","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gxM0isQea28klxUb_EjtVLOIV8ItwuHL3VepOeQMfQV39yWxBuZK3j17zHQm"} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gxM0isQea28klxUb_EjtVLOIV8ItwuHL3VepOeQMfQV39yWxBuZK3j17zHQm\"}"} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b47e18e1-6906-4e33-abe7-2246017b23f9","keyName":"e2e-rate-a-b1d7a1","subscription":"e2e-rate-iso-a-b1d7a1","tenant":"e2e-shared-a-4cda06","userId":"b47e18e1-6906-4e33-abe7-2246017b23f9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\",\"requestedSubscription\":\"e2e-rate-iso-a-b1d7a1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d7a1","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"}} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1d7a1"} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b47e18e1-6906-4e33-abe7-2246017b23f9","keyName":"e2e-rate-a-b1d7a1","selected_subscription":"e2e-rate-iso-a-b1d7a1","selected_subscription_key":"ai-tenant-e2e-shared-a-4cda06/e2e-rate-iso-a-b1d7a1@ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d7a1","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51356","PortSpecifier":{"PortValue":51356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","method":"POST","path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51356","PortSpecifier":{"PortValue":51356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237547,"nanos":597667005},"http":{"id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gxM0isQea28klxUb_EjtVLOIV8ItwuHL3VepOeQMfQV39yWxBuZK3j17zHQm"} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gxM0isQea28klxUb_EjtVLOIV8ItwuHL3VepOeQMfQV39yWxBuZK3j17zHQm\"}"} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b47e18e1-6906-4e33-abe7-2246017b23f9","keyName":"e2e-rate-a-b1d7a1","subscription":"e2e-rate-iso-a-b1d7a1","tenant":"e2e-shared-a-4cda06","userId":"b47e18e1-6906-4e33-abe7-2246017b23f9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\",\"requestedSubscription\":\"e2e-rate-iso-a-b1d7a1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d7a1","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"}} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1d7a1"} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b47e18e1-6906-4e33-abe7-2246017b23f9","keyName":"e2e-rate-a-b1d7a1","selected_subscription":"e2e-rate-iso-a-b1d7a1","selected_subscription_key":"ai-tenant-e2e-shared-a-4cda06/e2e-rate-iso-a-b1d7a1@ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d7a1","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56602","PortSpecifier":{"PortValue":56602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce75cce9-5a62-4633-ba27-86c3ad339684","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56602","PortSpecifier":{"PortValue":56602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237567,"nanos":449652295},"http":{"id":"ce75cce9-5a62-4633-ba27-86c3ad339684","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54814","PortSpecifier":{"PortValue":54814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54814","PortSpecifier":{"PortValue":54814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237567,"nanos":485661078},"http":{"id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56618","PortSpecifier":{"PortValue":56618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","method":"POST","path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56618","PortSpecifier":{"PortValue":56618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237567,"nanos":529879280},"http":{"id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Vgrt4nmua47smEU4_BQ9b4xyB0NbLxNaUJ6YOY7Vxd8PihFOzw6fA7a3MvQm"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Vgrt4nmua47smEU4_BQ9b4xyB0NbLxNaUJ6YOY7Vxd8PihFOzw6fA7a3MvQm\"}"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","keyName":"e2e-rate-a-b1d8e7","subscription":"e2e-rate-iso-a-b1d8e7","tenant":"e2e-shared-a-4cda06","userId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\",\"requestedSubscription\":\"e2e-rate-iso-a-b1d8e7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d8e7","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1d8e7"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","keyName":"e2e-rate-a-b1d8e7","selected_subscription":"e2e-rate-iso-a-b1d8e7","selected_subscription_key":"ai-tenant-e2e-shared-a-4cda06/e2e-rate-iso-a-b1d8e7@ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d8e7","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56620","PortSpecifier":{"PortValue":56620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b400c15-8caa-4b05-843d-28c914cb8fda","method":"POST","path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56620","PortSpecifier":{"PortValue":56620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237568,"nanos":577324856},"http":{"id":"2b400c15-8caa-4b05-843d-28c914cb8fda","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Vgrt4nmua47smEU4_BQ9b4xyB0NbLxNaUJ6YOY7Vxd8PihFOzw6fA7a3MvQm"} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Vgrt4nmua47smEU4_BQ9b4xyB0NbLxNaUJ6YOY7Vxd8PihFOzw6fA7a3MvQm\"}"} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","keyName":"e2e-rate-a-b1d8e7","subscription":"e2e-rate-iso-a-b1d8e7","tenant":"e2e-shared-a-4cda06","userId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\",\"requestedSubscription\":\"e2e-rate-iso-a-b1d8e7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d8e7","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"}} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1d8e7"} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","keyName":"e2e-rate-a-b1d8e7","selected_subscription":"e2e-rate-iso-a-b1d8e7","selected_subscription_key":"ai-tenant-e2e-shared-a-4cda06/e2e-rate-iso-a-b1d8e7@ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d8e7","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56632","PortSpecifier":{"PortValue":56632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","method":"POST","path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56632","PortSpecifier":{"PortValue":56632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237569,"nanos":618188830},"http":{"id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Vgrt4nmua47smEU4_BQ9b4xyB0NbLxNaUJ6YOY7Vxd8PihFOzw6fA7a3MvQm"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Vgrt4nmua47smEU4_BQ9b4xyB0NbLxNaUJ6YOY7Vxd8PihFOzw6fA7a3MvQm\"}"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","keyName":"e2e-rate-a-b1d8e7","subscription":"e2e-rate-iso-a-b1d8e7","tenant":"e2e-shared-a-4cda06","userId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\",\"requestedSubscription\":\"e2e-rate-iso-a-b1d8e7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d8e7","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1d8e7"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","keyName":"e2e-rate-a-b1d8e7","selected_subscription":"e2e-rate-iso-a-b1d8e7","selected_subscription_key":"ai-tenant-e2e-shared-a-4cda06/e2e-rate-iso-a-b1d8e7@ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d8e7","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54816","PortSpecifier":{"PortValue":54816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","method":"POST","path":"/ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc/v1/completions","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54816","PortSpecifier":{"PortValue":54816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237569,"nanos":656861644},"http":{"id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OufmJPuK8lEG171s_xBnqFrfxdJGkcjUyK7hYMeK4k5dYKTvOalooXeiXNFv"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OufmJPuK8lEG171s_xBnqFrfxdJGkcjUyK7hYMeK4k5dYKTvOalooXeiXNFv\"}"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aa63bd79-4228-4ade-bab6-f489d92d9530","keyName":"e2e-rate-b-b1d8e7","subscription":"e2e-rate-iso-b-b1d8e7","tenant":"e2e-shared-b-683bdc","userId":"aa63bd79-4228-4ade-bab6-f489d92d9530","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc\",\"requestedSubscription\":\"e2e-rate-iso-b-b1d8e7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m","name":"rate-test-model-683bdc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b1d8e7","namespace":"ai-tenant-e2e-shared-b-683bdc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc"}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-b1d8e7"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"aa63bd79-4228-4ade-bab6-f489d92d9530","keyName":"e2e-rate-b-b1d8e7","selected_subscription":"e2e-rate-iso-b-b1d8e7","selected_subscription_key":"ai-tenant-e2e-shared-b-683bdc/e2e-rate-iso-b-b1d8e7@ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m","name":"rate-test-model-683bdc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b1d8e7","namespace":"ai-tenant-e2e-shared-b-683bdc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1081bdbaa031ca1d8527bd5e0c8e8880e7fa5c7fcbdf310fda508a4bad05a168"} {"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"} {"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"} {"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6e8406936c38c2253fd40f0a31ff711f554f0b223ca1b4f2309f72958329808"} {"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f71743290ec8bacd298592e72b6ff6dde749fa3ab4ee167d4aecb0d98c56b55a"} {"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"} {"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"} {"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e1d40704d0bab10ec4cdcd75600717cbb51295fca76a2396856daf03239cf2c"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb5735ab3189fda0ecb12733325e9b359b65fee2d855a23ee7c5028dcc0e15ba"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86162ad661f0c29b175a6a5b77d2d9007f5f8659bf159e9643fca74d15eda652"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/572d7009c5c45cfb65a1817d11e57dc31a156e30a8225b3721afb726c8f10ce5"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b8d7318191d7c8ab847859d568df0e91b62a97ca32f3d580d303d8dd5e0bd59"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c33638ee771b8de68039f0ac9c8e4e7a223d97419310f8fe67c77ffb001e21b5"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9"} {"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1d03e6397768fa29f9ca97648dba966ccf5b192c26526db3baa9524bc545664"} {"level":"info","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b713e47f-873b-4c71-84e9-25865aca3417","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50556","PortSpecifier":{"PortValue":50556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b713e47f-873b-4c71-84e9-25865aca3417","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b713e47f-873b-4c71-84e9-25865aca3417","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50556","PortSpecifier":{"PortValue":50556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237635,"nanos":132509026},"http":{"id":"b713e47f-873b-4c71-84e9-25865aca3417","method":"POST","headers":{":authority":"maas.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b713e47f-873b-4c71-84e9-25865aca3417","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b713e47f-873b-4c71-84e9-25865aca3417","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b713e47f-873b-4c71-84e9-25865aca3417","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b713e47f-873b-4c71-84e9-25865aca3417","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50558","PortSpecifier":{"PortValue":50558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50558","PortSpecifier":{"PortValue":50558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237635,"nanos":184530013},"http":{"id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","method":"POST","headers":{":authority":"maas.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QW5fWico50odiR7Q_eVy9u2Z4PslVhjYd9ZbFyWqcEdLXTV3Mv4XMbc4oAAu"} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QW5fWico50odiR7Q_eVy9u2Z4PslVhjYd9ZbFyWqcEdLXTV3Mv4XMbc4oAAu\"}"} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f7231504-9107-44b8-84dd-d392ee15b1a7","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"f7231504-9107-44b8-84dd-d392ee15b1a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f7231504-9107-44b8-84dd-d392ee15b1a7","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8"} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1"} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"} {"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"} {"level":"error","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700"} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576"} {"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd"} {"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700"} {"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1"} {"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576"} {"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd"} {"level":"info","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36430","PortSpecifier":{"PortValue":36430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-1c9694.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36430","PortSpecifier":{"PortValue":36430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237690,"nanos":662107301},"http":{"id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","method":"POST","headers":{":authority":"e2e-ipp-a-1c9694.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}} {"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-1c9694.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-1c9694/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47144","PortSpecifier":{"PortValue":47144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","method":"POST","path":"/ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694/v1/chat/completions","host":"e2e-ipp-a-1c9694.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47144","PortSpecifier":{"PortValue":47144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237692,"nanos":733473551},"http":{"id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","method":"POST","headers":{":authority":"e2e-ipp-a-1c9694.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2jURI1cy1hWW14MF_C3DGJs2h1qUy0sKBLLMh1rykcLTCAb5MAUV3grL3sd5"} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-1c9694.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2jURI1cy1hWW14MF_C3DGJs2h1qUy0sKBLLMh1rykcLTCAb5MAUV3grL3sd5\"}"} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-1c9694.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4fdd3e6f-b7c2-4c21-b173-37330d734ce2","keyName":"e2e-ipp-1c9694","subscription":"ipp-route-1c9694-sub","tenant":"e2e-ipp-a-1c9694","userId":"4fdd3e6f-b7c2-4c21-b173-37330d734ce2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-1c9694.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694\",\"requestedSubscription\":\"ipp-route-1c9694-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-1c9694.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-1c9694/models/facebook/opt-125m","name":"ipp-route-1c9694","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-1c9694-sub","namespace":"ai-tenant-e2e-ipp-a-1c9694","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694"}} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-1c9694/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-1c9694-sub"} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4fdd3e6f-b7c2-4c21-b173-37330d734ce2","keyName":"e2e-ipp-1c9694","selected_subscription":"ipp-route-1c9694-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694-sub@ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-1c9694/models/facebook/opt-125m","name":"ipp-route-1c9694","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-1c9694-sub","namespace":"ai-tenant-e2e-ipp-a-1c9694","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T11:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1"} {"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8"} {"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769"} {"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"} {"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576"} {"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"} {"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"} {"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"} {"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd"} {"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700"} {"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"} {"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1"}