--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/843c7b10d5211c8c0e4cd8abb8868b590d77c2aab701ce49b91acfb809327264"} {"level":"error","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"843c7b10d5211c8c0e4cd8abb8868b590d77c2aab701ce49b91acfb809327264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["843c7b10d5211c8c0e4cd8abb8868b590d77c2aab701ce49b91acfb809327264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"843c7b10d5211c8c0e4cd8abb8868b590d77c2aab701ce49b91acfb809327264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"843c7b10d5211c8c0e4cd8abb8868b590d77c2aab701ce49b91acfb809327264","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/843c7b10d5211c8c0e4cd8abb8868b590d77c2aab701ce49b91acfb809327264"} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15"} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15"} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15"} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684"} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684"} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684"} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3"} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43399ac8a26dcbdacdbd8ee52b416311f669dd7814bf1b17d4a0c7f319b4cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e"} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43399ac8a26dcbdacdbd8ee52b416311f669dd7814bf1b17d4a0c7f319b4cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3"} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43399ac8a26dcbdacdbd8ee52b416311f669dd7814bf1b17d4a0c7f319b4cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43399ac8a26dcbdacdbd8ee52b416311f669dd7814bf1b17d4a0c7f319b4cf"} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43399ac8a26dcbdacdbd8ee52b416311f669dd7814bf1b17d4a0c7f319b4cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85aab748751ec06c8354a367e0e68c0edc5342ae2f3e9ce3388e7c87f108f182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85aab748751ec06c8354a367e0e68c0edc5342ae2f3e9ce3388e7c87f108f182","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e"} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43399ac8a26dcbdacdbd8ee52b416311f669dd7814bf1b17d4a0c7f319b4cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd43399ac8a26dcbdacdbd8ee52b416311f669dd7814bf1b17d4a0c7f319b4cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435"} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43399ac8a26dcbdacdbd8ee52b416311f669dd7814bf1b17d4a0c7f319b4cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85aab748751ec06c8354a367e0e68c0edc5342ae2f3e9ce3388e7c87f108f182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85aab748751ec06c8354a367e0e68c0edc5342ae2f3e9ce3388e7c87f108f182","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85aab748751ec06c8354a367e0e68c0edc5342ae2f3e9ce3388e7c87f108f182"} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43399ac8a26dcbdacdbd8ee52b416311f669dd7814bf1b17d4a0c7f319b4cf"} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43399ac8a26dcbdacdbd8ee52b416311f669dd7814bf1b17d4a0c7f319b4cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85aab748751ec06c8354a367e0e68c0edc5342ae2f3e9ce3388e7c87f108f182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85aab748751ec06c8354a367e0e68c0edc5342ae2f3e9ce3388e7c87f108f182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e"} {"level":"info","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85aab748751ec06c8354a367e0e68c0edc5342ae2f3e9ce3388e7c87f108f182","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85aab748751ec06c8354a367e0e68c0edc5342ae2f3e9ce3388e7c87f108f182","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435"} {"level":"debug","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6"} {"level":"info","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85aab748751ec06c8354a367e0e68c0edc5342ae2f3e9ce3388e7c87f108f182"} {"level":"info","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435"} {"level":"info","ts":"2026-07-14T02:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6"} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"} {"level":"debug","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"725c4cdaac5e55c11f0041046f28321d73eb761b173e7fc376449a3ef4698598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"725c4cdaac5e55c11f0041046f28321d73eb761b173e7fc376449a3ef4698598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"725c4cdaac5e55c11f0041046f28321d73eb761b173e7fc376449a3ef4698598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"725c4cdaac5e55c11f0041046f28321d73eb761b173e7fc376449a3ef4698598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/725c4cdaac5e55c11f0041046f28321d73eb761b173e7fc376449a3ef4698598"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"725c4cdaac5e55c11f0041046f28321d73eb761b173e7fc376449a3ef4698598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["725c4cdaac5e55c11f0041046f28321d73eb761b173e7fc376449a3ef4698598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"725c4cdaac5e55c11f0041046f28321d73eb761b173e7fc376449a3ef4698598","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"725c4cdaac5e55c11f0041046f28321d73eb761b173e7fc376449a3ef4698598","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd"} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/725c4cdaac5e55c11f0041046f28321d73eb761b173e7fc376449a3ef4698598"} {"level":"debug","ts":"2026-07-14T02:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042"} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba"} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042"} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba"} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba"} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba"} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"} {"level":"info","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52230","PortSpecifier":{"PortValue":52230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52230","PortSpecifier":{"PortValue":52230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997082,"nanos":25821623},"http":{"id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/auth-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cf6d974-f1f3-4cb7-8dbf-dab6dfde000a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46638","PortSpecifier":{"PortValue":46638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9dd100d-203f-430b-a4a8-add2046cfafa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46638","PortSpecifier":{"PortValue":46638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997082,"nanos":92483223},"http":{"id":"c9dd100d-203f-430b-a4a8-add2046cfafa","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/auth-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9dd100d-203f-430b-a4a8-add2046cfafa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52246","PortSpecifier":{"PortValue":52246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","method":"GET","path":"/maas-api/v1/api-keys/335892c7-3abb-4e99-923e-254979820968","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52246","PortSpecifier":{"PortValue":52246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997082,"nanos":151038629},"http":{"id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","method":"GET","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/335892c7-3abb-4e99-923e-254979820968",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/335892c7-3abb-4e99-923e-254979820968",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/auth-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a750e38-4f70-4a01-a7d1-000ee4ff4c17","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46642","PortSpecifier":{"PortValue":46642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"645bb613-e166-4175-973f-b0aae6be9e9f","method":"GET","path":"/maas-api/v1/api-keys/94b3420c-f383-40be-af72-bbd3ff45a701","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46642","PortSpecifier":{"PortValue":46642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997082,"nanos":195813915},"http":{"id":"645bb613-e166-4175-973f-b0aae6be9e9f","method":"GET","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/94b3420c-f383-40be-af72-bbd3ff45a701",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/94b3420c-f383-40be-af72-bbd3ff45a701",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/auth-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:44:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"645bb613-e166-4175-973f-b0aae6be9e9f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59b0f501-e232-4028-adb0-9d889df2c587","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33166","PortSpecifier":{"PortValue":33166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59b0f501-e232-4028-adb0-9d889df2c587","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59b0f501-e232-4028-adb0-9d889df2c587","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33166","PortSpecifier":{"PortValue":33166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997101,"nanos":402260253},"http":{"id":"59b0f501-e232-4028-adb0-9d889df2c587","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59b0f501-e232-4028-adb0-9d889df2c587","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59b0f501-e232-4028-adb0-9d889df2c587","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59b0f501-e232-4028-adb0-9d889df2c587","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59b0f501-e232-4028-adb0-9d889df2c587","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59b0f501-e232-4028-adb0-9d889df2c587","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59b0f501-e232-4028-adb0-9d889df2c587","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/auth-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59b0f501-e232-4028-adb0-9d889df2c587","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59b0f501-e232-4028-adb0-9d889df2c587","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59b0f501-e232-4028-adb0-9d889df2c587","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59b0f501-e232-4028-adb0-9d889df2c587","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59b0f501-e232-4028-adb0-9d889df2c587","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57832","PortSpecifier":{"PortValue":57832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57832","PortSpecifier":{"PortValue":57832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997101,"nanos":452157187},"http":{"id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/auth-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80c1cfd0-c5b8-4afc-8eb5-b475f6a06561","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33170","PortSpecifier":{"PortValue":33170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33170","PortSpecifier":{"PortValue":33170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997101,"nanos":492652863},"http":{"id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","method":"GET","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Vt2vNy7CT3uIfF32_6fN21bOg4VAlJqU5zBmSWPdarerwRQFfnOAKCWlU6eF"} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Vt2vNy7CT3uIfF32_6fN21bOg4VAlJqU5zBmSWPdarerwRQFfnOAKCWlU6eF\"}"} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"216c2860-3e1f-47ef-832b-5afd1e4ddd16","keyName":"e2e-auth-iso-a-d47e9c","subscription":"e2e-auth-iso-56a3b5","tenant":"e2e-shared-a-a148c7","userId":"216c2860-3e1f-47ef-832b-5afd1e4ddd16","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/auth-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-56a3b5"} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bece51a-04b0-4d3a-bf8d-de6897e0210c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60342","PortSpecifier":{"PortValue":60342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60342","PortSpecifier":{"PortValue":60342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997120,"nanos":733574921},"http":{"id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/auth-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c99daa3f-e9a3-4f8a-8c54-c369ee5273d8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ead98a10-f80a-463a-baca-451e49c53e53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46436","PortSpecifier":{"PortValue":46436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ead98a10-f80a-463a-baca-451e49c53e53","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ead98a10-f80a-463a-baca-451e49c53e53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46436","PortSpecifier":{"PortValue":46436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997120,"nanos":776706111},"http":{"id":"ead98a10-f80a-463a-baca-451e49c53e53","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ead98a10-f80a-463a-baca-451e49c53e53","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ead98a10-f80a-463a-baca-451e49c53e53","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ead98a10-f80a-463a-baca-451e49c53e53","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ead98a10-f80a-463a-baca-451e49c53e53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ead98a10-f80a-463a-baca-451e49c53e53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ead98a10-f80a-463a-baca-451e49c53e53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/auth-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ead98a10-f80a-463a-baca-451e49c53e53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ead98a10-f80a-463a-baca-451e49c53e53","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ead98a10-f80a-463a-baca-451e49c53e53","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ead98a10-f80a-463a-baca-451e49c53e53","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ead98a10-f80a-463a-baca-451e49c53e53","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"343dc5f5-8a92-4434-ad2b-9b383905a46d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46444","PortSpecifier":{"PortValue":46444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"343dc5f5-8a92-4434-ad2b-9b383905a46d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"343dc5f5-8a92-4434-ad2b-9b383905a46d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46444","PortSpecifier":{"PortValue":46444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997120,"nanos":816975163},"http":{"id":"343dc5f5-8a92-4434-ad2b-9b383905a46d","method":"GET","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"343dc5f5-8a92-4434-ad2b-9b383905a46d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cUtP8C27HTHXnr57_xzjTZWNexgi6rJyD6UYwpolDQoqQ1zFb6t0RGXZlL7I"} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"343dc5f5-8a92-4434-ad2b-9b383905a46d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c47335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cUtP8C27HTHXnr57_xzjTZWNexgi6rJyD6UYwpolDQoqQ1zFb6t0RGXZlL7I\"}"} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"343dc5f5-8a92-4434-ad2b-9b383905a46d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c47335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"343dc5f5-8a92-4434-ad2b-9b383905a46d","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"343dc5f5-8a92-4434-ad2b-9b383905a46d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"343dc5f5-8a92-4434-ad2b-9b383905a46d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"343dc5f5-8a92-4434-ad2b-9b383905a46d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T02:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"343dc5f5-8a92-4434-ad2b-9b383905a46d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34616","PortSpecifier":{"PortValue":34616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34616","PortSpecifier":{"PortValue":34616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997137,"nanos":927016133},"http":{"id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/auth-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d35bf812-f0fa-4d01-88b9-03042f2b1089","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43828","PortSpecifier":{"PortValue":43828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43828","PortSpecifier":{"PortValue":43828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997137,"nanos":973919073},"http":{"id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/auth-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3535b3bc-511b-4957-baa3-983bef9c5d9b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34632","PortSpecifier":{"PortValue":34632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34632","PortSpecifier":{"PortValue":34632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997138,"nanos":12118539},"http":{"id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/auth-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb238d03-9f34-428e-b1fe-a31d33d2cdab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43830","PortSpecifier":{"PortValue":43830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"589ecfd8-db72-44af-9553-e4667a3d6600","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43830","PortSpecifier":{"PortValue":43830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997138,"nanos":48553540},"http":{"id":"589ecfd8-db72-44af-9553-e4667a3d6600","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/auth-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"589ecfd8-db72-44af-9553-e4667a3d6600","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43878","PortSpecifier":{"PortValue":43878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f28fcc00-e6db-4504-be02-2f889e720a07","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43878","PortSpecifier":{"PortValue":43878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997152,"nanos":999933530},"http":{"id":"f28fcc00-e6db-4504-be02-2f889e720a07","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/auth-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f28fcc00-e6db-4504-be02-2f889e720a07","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40684","PortSpecifier":{"PortValue":40684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40684","PortSpecifier":{"PortValue":40684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997153,"nanos":39040807},"http":{"id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/auth-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"096f5cad-82d2-404c-b47d-17cc29ec1c07","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40688","PortSpecifier":{"PortValue":40688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","method":"GET","path":"/maas-api/v1/api-keys/5bc62e53-b09f-4913-af9e-d3908394dc91","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40688","PortSpecifier":{"PortValue":40688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997153,"nanos":88391373},"http":{"id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","method":"GET","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5bc62e53-b09f-4913-af9e-d3908394dc91",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5bc62e53-b09f-4913-af9e-d3908394dc91",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/auth-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"876c4b54-2b60-412e-af31-8d31f2af9bdd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43884","PortSpecifier":{"PortValue":43884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","method":"GET","path":"/maas-api/v1/api-keys/5bc62e53-b09f-4913-af9e-d3908394dc91","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43884","PortSpecifier":{"PortValue":43884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997153,"nanos":120040663},"http":{"id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","method":"GET","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5bc62e53-b09f-4913-af9e-d3908394dc91",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5bc62e53-b09f-4913-af9e-d3908394dc91",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/auth-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9abd76d0-1396-47e0-bff4-93c2ccb11a44","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85719319-639f-48ed-983f-56f4c501c209","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54198","PortSpecifier":{"PortValue":54198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85719319-639f-48ed-983f-56f4c501c209","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85719319-639f-48ed-983f-56f4c501c209","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54198","PortSpecifier":{"PortValue":54198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997168,"nanos":85511620},"http":{"id":"85719319-639f-48ed-983f-56f4c501c209","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85719319-639f-48ed-983f-56f4c501c209","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85719319-639f-48ed-983f-56f4c501c209","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85719319-639f-48ed-983f-56f4c501c209","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85719319-639f-48ed-983f-56f4c501c209","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85719319-639f-48ed-983f-56f4c501c209","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85719319-639f-48ed-983f-56f4c501c209","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/auth-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85719319-639f-48ed-983f-56f4c501c209","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85719319-639f-48ed-983f-56f4c501c209","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85719319-639f-48ed-983f-56f4c501c209","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85719319-639f-48ed-983f-56f4c501c209","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85719319-639f-48ed-983f-56f4c501c209","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56090","PortSpecifier":{"PortValue":56090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56090","PortSpecifier":{"PortValue":56090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997168,"nanos":121075980},"http":{"id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/auth-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db4cfeb2-3243-4d7b-9252-51106deb7fe8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"135a6c07-bf20-4094-bcba-db3645261a31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54204","PortSpecifier":{"PortValue":54204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"135a6c07-bf20-4094-bcba-db3645261a31","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"135a6c07-bf20-4094-bcba-db3645261a31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54204","PortSpecifier":{"PortValue":54204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997168,"nanos":157195471},"http":{"id":"135a6c07-bf20-4094-bcba-db3645261a31","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"135a6c07-bf20-4094-bcba-db3645261a31","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HTj6xJcLw3V319wv_UWTYrzBnOH8fnjz2g2RHaCzskg6G7XDhwvzTKo3N3Bk"} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"135a6c07-bf20-4094-bcba-db3645261a31","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HTj6xJcLw3V319wv_UWTYrzBnOH8fnjz2g2RHaCzskg6G7XDhwvzTKo3N3Bk\"}"} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"135a6c07-bf20-4094-bcba-db3645261a31","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"053c8289-2dc9-4142-8a24-196b78b11e6e","keyName":"e2e-auth-iso-a-ee08f2","subscription":"e2e-auth-iso-f03282","tenant":"e2e-shared-a-a148c7","userId":"053c8289-2dc9-4142-8a24-196b78b11e6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"135a6c07-bf20-4094-bcba-db3645261a31","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"135a6c07-bf20-4094-bcba-db3645261a31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"135a6c07-bf20-4094-bcba-db3645261a31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"135a6c07-bf20-4094-bcba-db3645261a31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/auth-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"135a6c07-bf20-4094-bcba-db3645261a31","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"135a6c07-bf20-4094-bcba-db3645261a31","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f03282"} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"135a6c07-bf20-4094-bcba-db3645261a31","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"135a6c07-bf20-4094-bcba-db3645261a31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"135a6c07-bf20-4094-bcba-db3645261a31","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"135a6c07-bf20-4094-bcba-db3645261a31","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9520a06b73b17cf6e6d2335c0ebcabf0931ce60f9f7f7b5efaedb76bd223bf5"} {"level":"info","ts":"2026-07-14T02:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c7dd5ac189f0723ce3c7ea2e9e632b92966298ee21c2984c5f474f6f8677192"} {"level":"info","ts":"2026-07-14T02:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/725c4cdaac5e55c11f0041046f28321d73eb761b173e7fc376449a3ef4698598"} {"level":"info","ts":"2026-07-14T02:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e84c2009115013cbf0f711242cb078f8896ebc9a67a3cf9d7544649c58a0a7e"} {"level":"info","ts":"2026-07-14T02:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a9d6906bcfb4feeae859052f4cb8b9eb002c2eff48a4bbc2b77c83e6a3ab920"} {"level":"info","ts":"2026-07-14T02:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7bff4cdd0f8a3404972b8e925377a448989ef6a2907b47b7d51a11a61d40f15"} {"level":"info","ts":"2026-07-14T02:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b05a0ac225f31ce43b4e1b74fe335d894493123c4020e1c16e20cd948c384dcd"} {"level":"info","ts":"2026-07-14T02:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b25ae5ba8bcafbad18b2eaa964e14b57443d5fbd85d277501176123fde8aeaba"} {"level":"info","ts":"2026-07-14T02:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0b6ace8bc3a2199e83cbf6fd1ac1a9df827bef55ee19c38e0011d01e1487cd8"} {"level":"info","ts":"2026-07-14T02:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c9da1addfa8a62379833e66016c3f81c737e7917e2ba8bbde28e73ee3ad2941"} {"level":"info","ts":"2026-07-14T02:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3c9aee9a5dc0624511b16f1368ee8f641c16b3287fcdb33d5c220e05dd50435"} {"level":"info","ts":"2026-07-14T02:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/843c7b10d5211c8c0e4cd8abb8868b590d77c2aab701ce49b91acfb809327264"} {"level":"info","ts":"2026-07-14T02:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca0413d875e19488af168b5cf4b37de29feb38388507b2e9490d052ce80895e6"} {"level":"info","ts":"2026-07-14T02:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85aab748751ec06c8354a367e0e68c0edc5342ae2f3e9ce3388e7c87f108f182"} {"level":"info","ts":"2026-07-14T02:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd43399ac8a26dcbdacdbd8ee52b416311f669dd7814bf1b17d4a0c7f319b4cf"} {"level":"info","ts":"2026-07-14T02:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d440dddf5c2218550a9de80b6a9a88804578567ca0099bc9a7374f65c9356ad"} {"level":"debug","ts":"2026-07-14T02:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c"} {"level":"debug","ts":"2026-07-14T02:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c"} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c"} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c"} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c"} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d"} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d"} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d"} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d"} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1951a43c8d145c494a71dc3c5c996095a253e7a300cad1ea9bf91bbac69ddc17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1951a43c8d145c494a71dc3c5c996095a253e7a300cad1ea9bf91bbac69ddc17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1951a43c8d145c494a71dc3c5c996095a253e7a300cad1ea9bf91bbac69ddc17"} {"level":"info","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1951a43c8d145c494a71dc3c5c996095a253e7a300cad1ea9bf91bbac69ddc17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1951a43c8d145c494a71dc3c5c996095a253e7a300cad1ea9bf91bbac69ddc17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800"} {"level":"info","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1951a43c8d145c494a71dc3c5c996095a253e7a300cad1ea9bf91bbac69ddc17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:46:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1951a43c8d145c494a71dc3c5c996095a253e7a300cad1ea9bf91bbac69ddc17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1"} {"level":"debug","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1951a43c8d145c494a71dc3c5c996095a253e7a300cad1ea9bf91bbac69ddc17"} {"level":"info","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800"} {"level":"info","ts":"2026-07-14T02:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1"} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4"} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4"} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b613750cac4efd139b3e07a171d56c6193e70e1914bf8c4fc31f237aed9a25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4"} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b613750cac4efd139b3e07a171d56c6193e70e1914bf8c4fc31f237aed9a25d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b613750cac4efd139b3e07a171d56c6193e70e1914bf8c4fc31f237aed9a25d"} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b613750cac4efd139b3e07a171d56c6193e70e1914bf8c4fc31f237aed9a25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b613750cac4efd139b3e07a171d56c6193e70e1914bf8c4fc31f237aed9a25d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b613750cac4efd139b3e07a171d56c6193e70e1914bf8c4fc31f237aed9a25d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b613750cac4efd139b3e07a171d56c6193e70e1914bf8c4fc31f237aed9a25d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4"} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b613750cac4efd139b3e07a171d56c6193e70e1914bf8c4fc31f237aed9a25d"} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3"} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3"} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3"} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843"} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843"} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3"} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843"} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843"} {"level":"debug","ts":"2026-07-14T02:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843"} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d"} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d"} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d"} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7"} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d"} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7"} {"level":"info","ts":"2026-07-14T02:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c"} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c"} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"debug","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c"} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4"} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843"} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3"} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800"} {"level":"info","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3"} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042"} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1951a43c8d145c494a71dc3c5c996095a253e7a300cad1ea9bf91bbac69ddc17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3"} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b613750cac4efd139b3e07a171d56c6193e70e1914bf8c4fc31f237aed9a25d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3"} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1951a43c8d145c494a71dc3c5c996095a253e7a300cad1ea9bf91bbac69ddc17"} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b613750cac4efd139b3e07a171d56c6193e70e1914bf8c4fc31f237aed9a25d"} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7"} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d"} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86"} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684"} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"} {"level":"info","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54254","PortSpecifier":{"PortValue":54254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"663c38b0-c8eb-4405-923c-98526320e0d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54254","PortSpecifier":{"PortValue":54254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997259,"nanos":720342406},"http":{"id":"663c38b0-c8eb-4405-923c-98526320e0d3","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/sub-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"663c38b0-c8eb-4405-923c-98526320e0d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17695718-7726-4b47-b81d-4e349e476934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56796","PortSpecifier":{"PortValue":56796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17695718-7726-4b47-b81d-4e349e476934","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17695718-7726-4b47-b81d-4e349e476934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56796","PortSpecifier":{"PortValue":56796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997259,"nanos":765866768},"http":{"id":"17695718-7726-4b47-b81d-4e349e476934","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"17695718-7726-4b47-b81d-4e349e476934","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17695718-7726-4b47-b81d-4e349e476934","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17695718-7726-4b47-b81d-4e349e476934","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17695718-7726-4b47-b81d-4e349e476934","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17695718-7726-4b47-b81d-4e349e476934","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17695718-7726-4b47-b81d-4e349e476934","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/sub-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"17695718-7726-4b47-b81d-4e349e476934","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17695718-7726-4b47-b81d-4e349e476934","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17695718-7726-4b47-b81d-4e349e476934","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17695718-7726-4b47-b81d-4e349e476934","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17695718-7726-4b47-b81d-4e349e476934","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54262","PortSpecifier":{"PortValue":54262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54262","PortSpecifier":{"PortValue":54262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997259,"nanos":816213167},"http":{"id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","method":"GET","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cRJZj0bwUE5KjamD_3di1dgAYlckdNr4AvCTtENpUCicBPkXJvX9N0JIpxjc"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cRJZj0bwUE5KjamD_3di1dgAYlckdNr4AvCTtENpUCicBPkXJvX9N0JIpxjc\"}"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9e477068-946a-4ca2-99dc-b9f168832fc6","keyName":"e2e-sub-iso-e9c798","subscription":"e2e-a-only-3e193b","tenant":"e2e-shared-a-a148c7","userId":"9e477068-946a-4ca2-99dc-b9f168832fc6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/sub-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-3e193b"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2611e08-07ed-4df0-83e7-8e1c407166b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56812","PortSpecifier":{"PortValue":56812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56812","PortSpecifier":{"PortValue":56812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997259,"nanos":860992294},"http":{"id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","method":"GET","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9zXVlMKgKACuPTUv_YINVg30OAazKbctLXCH2nr6TVhuwZmNoVgWNB7vRquo"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c47335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9zXVlMKgKACuPTUv_YINVg30OAazKbctLXCH2nr6TVhuwZmNoVgWNB7vRquo\"}"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c47335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db9c799-ff69-4189-ac06-a4c9c2390b56","keyName":"e2e-sub-iso-0cb015","subscription":"e2e-b-only-3e193b","tenant":"e2e-shared-b-c47335","userId":"9db9c799-ff69-4189-ac06-a4c9c2390b56","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/sub-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-3e193b"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:47:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbddc070-7a8a-469d-bb97-9d1769061dc0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35684","PortSpecifier":{"PortValue":35684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35684","PortSpecifier":{"PortValue":35684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997269,"nanos":863606513},"http":{"id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/sub-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9273fd7-1423-49c8-a909-c3cf36ad8f9a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46458","PortSpecifier":{"PortValue":46458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46458","PortSpecifier":{"PortValue":46458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997269,"nanos":900027057},"http":{"id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/sub-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f26958fc-746c-4c18-ac52-6396cc2c47f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c106f122-da50-4200-9577-b463e9c8e30a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35696","PortSpecifier":{"PortValue":35696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c106f122-da50-4200-9577-b463e9c8e30a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c106f122-da50-4200-9577-b463e9c8e30a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35696","PortSpecifier":{"PortValue":35696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997269,"nanos":944415020},"http":{"id":"c106f122-da50-4200-9577-b463e9c8e30a","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c106f122-da50-4200-9577-b463e9c8e30a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-srkuF7MSSlaGXZCo_SUeEfSj8xYVM4BP34Df3jBMpgJpz72DuoLzotADdkwr"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c106f122-da50-4200-9577-b463e9c8e30a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-srkuF7MSSlaGXZCo_SUeEfSj8xYVM4BP34Df3jBMpgJpz72DuoLzotADdkwr\"}"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c106f122-da50-4200-9577-b463e9c8e30a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00350388-c93d-4049-8b34-4d48808eefd7","keyName":"e2e-sub-iso-bacd47","subscription":"e2e-shared-sub-429e46","tenant":"e2e-shared-a-a148c7","userId":"00350388-c93d-4049-8b34-4d48808eefd7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c106f122-da50-4200-9577-b463e9c8e30a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c106f122-da50-4200-9577-b463e9c8e30a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c106f122-da50-4200-9577-b463e9c8e30a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c106f122-da50-4200-9577-b463e9c8e30a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/sub-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c106f122-da50-4200-9577-b463e9c8e30a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c106f122-da50-4200-9577-b463e9c8e30a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c106f122-da50-4200-9577-b463e9c8e30a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c106f122-da50-4200-9577-b463e9c8e30a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-429e46"} {"level":"info","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c106f122-da50-4200-9577-b463e9c8e30a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c106f122-da50-4200-9577-b463e9c8e30a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46460","PortSpecifier":{"PortValue":46460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46460","PortSpecifier":{"PortValue":46460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997269,"nanos":974074449},"http":{"id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-H2NI3xXY6TIl5gv2_llOEvRa59XFhESwlgy7dRKyeMMESIyqSwIuEeZdeyBl"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c47335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-H2NI3xXY6TIl5gv2_llOEvRa59XFhESwlgy7dRKyeMMESIyqSwIuEeZdeyBl\"}"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c47335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2f08421f-1e36-462b-9595-ee1c4885c852","keyName":"e2e-sub-iso-5f530f","subscription":"e2e-shared-sub-429e46","tenant":"e2e-shared-b-c47335","userId":"2f08421f-1e36-462b-9595-ee1c4885c852","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/sub-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-429e46"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c183a413-ab4f-4ea7-9334-56fa2acd9f76","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d739f96169782610a932d9bf1cc5646b8546668688f11a808fe1535310229a0"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42c5db136d7c62627a7220d8116a01d6569648b9d87cf7851a472f40b5c98800"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f45099ac01b58d34a3d40d75ed228760170a239f27496d9c877f76f09fde50f1"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e7d5d989a35a8876faa70ccf598371b8f685c5b180cdd819441f1d4e9c19c2c"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6990603fef4712fc4b2a42e9ed9ff080c3710b0208ad0a168a9710283a54286d"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b613750cac4efd139b3e07a171d56c6193e70e1914bf8c4fc31f237aed9a25d"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/158cd3a4031621ae1a33dece74a5c13383f9022b13cca62c8a844870eb710b86"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d1f96bb1357d5d89d23b9ff91f126cb578a1e9d89d7097ee73f3d46426c515f"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1951a43c8d145c494a71dc3c5c996095a253e7a300cad1ea9bf91bbac69ddc17"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20b1fa0c71a1ba5b2d8c08936922a041179e1a4a879ab293fc711dcbcc9af8be"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1e53844b1dfcb4688fb6dfe67cf8fb08bb4adaf34f8bed64af2b3d7be4b6ea3"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39203284a6ca111e17c792806c2fbd42e25435ce45ffa2c3b37ed935523d3686"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bd28b9fdd64c9667a11d01bf8c5ed759604adfc58b18d2df3c98d19ba05d843"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/320c2cafe455f2fb0ac3d85f6a2c8d16fcb75210cf7ec4b35569c5e2c40d21e7"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4da441c24c16d5701296389bd5ab1e5f7985fa0b5d8ad230d8cc7676e75fe27d"} {"level":"info","ts":"2026-07-14T02:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94da2a2baac16a460c2ffff44c9e6dec54d6c8db99a9679893ba6936eff0c6c4"} {"level":"debug","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87"} {"level":"debug","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87"} {"level":"debug","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87"} {"level":"debug","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87"} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87"} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3"} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3"} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3"} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3"} {"level":"error","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5747bbb5d3753c420db4334e6bf2311ce9b048aae1255122cc57f11b0f0d8d"} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5747bbb5d3753c420db4334e6bf2311ce9b048aae1255122cc57f11b0f0d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5747bbb5d3753c420db4334e6bf2311ce9b048aae1255122cc57f11b0f0d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5747bbb5d3753c420db4334e6bf2311ce9b048aae1255122cc57f11b0f0d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5747bbb5d3753c420db4334e6bf2311ce9b048aae1255122cc57f11b0f0d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3"} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5747bbb5d3753c420db4334e6bf2311ce9b048aae1255122cc57f11b0f0d8d"} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"} {"level":"debug","ts":"2026-07-14T02:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189"} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189"} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189"} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69"} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189"} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"} {"level":"info","ts":"2026-07-14T02:48:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69"} {"level":"debug","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"info","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"info","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"debug","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"debug","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"debug","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a"} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a"} {"level":"debug","ts":"2026-07-14T02:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578"} {"level":"info","ts":"2026-07-14T02:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:48:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"info","ts":"2026-07-14T02:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042"} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042"} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578"} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T02:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684"} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5747bbb5d3753c420db4334e6bf2311ce9b048aae1255122cc57f11b0f0d8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69"} {"level":"debug","ts":"2026-07-14T02:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T02:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a"} {"level":"info","ts":"2026-07-14T02:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"} {"level":"debug","ts":"2026-07-14T02:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T02:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5747bbb5d3753c420db4334e6bf2311ce9b048aae1255122cc57f11b0f0d8d"} {"level":"info","ts":"2026-07-14T02:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"} {"level":"info","ts":"2026-07-14T02:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87"} {"level":"info","ts":"2026-07-14T02:49:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135"} {"level":"info","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36838","PortSpecifier":{"PortValue":36838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36838","PortSpecifier":{"PortValue":36838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997343,"nanos":56679493},"http":{"id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33e5e01b-9e18-4d4c-93f7-03ddb4302f48","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43070","PortSpecifier":{"PortValue":43070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43070","PortSpecifier":{"PortValue":43070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997343,"nanos":101538042},"http":{"id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/rate-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7f1c1ed-2428-4f53-a8e3-78fd9e4ba138","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36852","PortSpecifier":{"PortValue":36852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","method":"POST","path":"/ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7/v1/completions","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36852","PortSpecifier":{"PortValue":36852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997343,"nanos":153476397},"http":{"id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UZdqIXqNBNFRVNqc_l4Upjq7rZYxOIAbUTE8dyMB0YzsHhGwryTz1gg5qHzV"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UZdqIXqNBNFRVNqc_l4Upjq7rZYxOIAbUTE8dyMB0YzsHhGwryTz1gg5qHzV\"}"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d317be3-0253-40d3-b589-85fde8221eb4","keyName":"e2e-rate-a-f79af5","subscription":"e2e-rate-iso-a-f79af5","tenant":"e2e-shared-a-a148c7","userId":"9d317be3-0253-40d3-b589-85fde8221eb4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\",\"requestedSubscription\":\"e2e-rate-iso-a-f79af5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a148c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f79af5","namespace":"ai-tenant-e2e-shared-a-a148c7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f79af5"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d317be3-0253-40d3-b589-85fde8221eb4","keyName":"e2e-rate-a-f79af5","selected_subscription":"e2e-rate-iso-a-f79af5","selected_subscription_key":"ai-tenant-e2e-shared-a-a148c7/e2e-rate-iso-a-f79af5@ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a148c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f79af5","namespace":"ai-tenant-e2e-shared-a-a148c7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6dd378d2-b8e5-4564-8a47-f7b32bc205ba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36862","PortSpecifier":{"PortValue":36862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","method":"POST","path":"/ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7/v1/completions","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36862","PortSpecifier":{"PortValue":36862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997344,"nanos":229114251},"http":{"id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UZdqIXqNBNFRVNqc_l4Upjq7rZYxOIAbUTE8dyMB0YzsHhGwryTz1gg5qHzV"} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UZdqIXqNBNFRVNqc_l4Upjq7rZYxOIAbUTE8dyMB0YzsHhGwryTz1gg5qHzV\"}"} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d317be3-0253-40d3-b589-85fde8221eb4","keyName":"e2e-rate-a-f79af5","subscription":"e2e-rate-iso-a-f79af5","tenant":"e2e-shared-a-a148c7","userId":"9d317be3-0253-40d3-b589-85fde8221eb4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\",\"requestedSubscription\":\"e2e-rate-iso-a-f79af5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a148c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f79af5","namespace":"ai-tenant-e2e-shared-a-a148c7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f79af5"} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d317be3-0253-40d3-b589-85fde8221eb4","keyName":"e2e-rate-a-f79af5","selected_subscription":"e2e-rate-iso-a-f79af5","selected_subscription_key":"ai-tenant-e2e-shared-a-a148c7/e2e-rate-iso-a-f79af5@ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a148c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f79af5","namespace":"ai-tenant-e2e-shared-a-a148c7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09ff5d07-5ee8-464d-8fc4-cc9b496c1f79","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36872","PortSpecifier":{"PortValue":36872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0cd40b3-20c7-406d-876b-704a7d552c40","method":"POST","path":"/ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7/v1/completions","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36872","PortSpecifier":{"PortValue":36872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997345,"nanos":280850741},"http":{"id":"b0cd40b3-20c7-406d-876b-704a7d552c40","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UZdqIXqNBNFRVNqc_l4Upjq7rZYxOIAbUTE8dyMB0YzsHhGwryTz1gg5qHzV"} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UZdqIXqNBNFRVNqc_l4Upjq7rZYxOIAbUTE8dyMB0YzsHhGwryTz1gg5qHzV\"}"} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d317be3-0253-40d3-b589-85fde8221eb4","keyName":"e2e-rate-a-f79af5","subscription":"e2e-rate-iso-a-f79af5","tenant":"e2e-shared-a-a148c7","userId":"9d317be3-0253-40d3-b589-85fde8221eb4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\",\"requestedSubscription\":\"e2e-rate-iso-a-f79af5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a148c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f79af5","namespace":"ai-tenant-e2e-shared-a-a148c7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f79af5"} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d317be3-0253-40d3-b589-85fde8221eb4","keyName":"e2e-rate-a-f79af5","selected_subscription":"e2e-rate-iso-a-f79af5","selected_subscription_key":"ai-tenant-e2e-shared-a-a148c7/e2e-rate-iso-a-f79af5@ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a148c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f79af5","namespace":"ai-tenant-e2e-shared-a-a148c7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:49:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0cd40b3-20c7-406d-876b-704a7d552c40","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49206","PortSpecifier":{"PortValue":49206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e03f542-1803-4940-bb7b-db08b0a30db1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49206","PortSpecifier":{"PortValue":49206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997358,"nanos":767097902},"http":{"id":"6e03f542-1803-4940-bb7b-db08b0a30db1","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e03f542-1803-4940-bb7b-db08b0a30db1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51112","PortSpecifier":{"PortValue":51112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"142d92e3-c8ea-48ab-9f04-7136b758d228","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51112","PortSpecifier":{"PortValue":51112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997358,"nanos":803569282},"http":{"id":"142d92e3-c8ea-48ab-9f04-7136b758d228","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"]}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8144b313ce34"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c12a4d24-95cd-4d3d-8605-acf58d82a57e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"acac686c-8680-4ad4-af96-a3ae590c2b81","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/rate-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"142d92e3-c8ea-48ab-9f04-7136b758d228","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49220","PortSpecifier":{"PortValue":49220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a71e791a-0f76-4af5-b788-86a1fcb97078","method":"POST","path":"/ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7/v1/completions","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49220","PortSpecifier":{"PortValue":49220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997358,"nanos":840875947},"http":{"id":"a71e791a-0f76-4af5-b788-86a1fcb97078","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6aP3hULzDcCjwySK_xSYXdbkDLUA8BnNI0e54CgPSnoHY7PvKnQ9zfPrbEll"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6aP3hULzDcCjwySK_xSYXdbkDLUA8BnNI0e54CgPSnoHY7PvKnQ9zfPrbEll\"}"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62910b8f-4fd8-442a-bb45-016211983421","keyName":"e2e-rate-a-be3b01","subscription":"e2e-rate-iso-a-be3b01","tenant":"e2e-shared-a-a148c7","userId":"62910b8f-4fd8-442a-bb45-016211983421","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\",\"requestedSubscription\":\"e2e-rate-iso-a-be3b01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a148c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-be3b01","namespace":"ai-tenant-e2e-shared-a-a148c7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-be3b01"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62910b8f-4fd8-442a-bb45-016211983421","keyName":"e2e-rate-a-be3b01","selected_subscription":"e2e-rate-iso-a-be3b01","selected_subscription_key":"ai-tenant-e2e-shared-a-a148c7/e2e-rate-iso-a-be3b01@ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a148c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-be3b01","namespace":"ai-tenant-e2e-shared-a-a148c7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:49:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a71e791a-0f76-4af5-b788-86a1fcb97078","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49236","PortSpecifier":{"PortValue":49236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","method":"POST","path":"/ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7/v1/completions","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49236","PortSpecifier":{"PortValue":49236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997359,"nanos":880836248},"http":{"id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6aP3hULzDcCjwySK_xSYXdbkDLUA8BnNI0e54CgPSnoHY7PvKnQ9zfPrbEll"} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6aP3hULzDcCjwySK_xSYXdbkDLUA8BnNI0e54CgPSnoHY7PvKnQ9zfPrbEll\"}"} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62910b8f-4fd8-442a-bb45-016211983421","keyName":"e2e-rate-a-be3b01","subscription":"e2e-rate-iso-a-be3b01","tenant":"e2e-shared-a-a148c7","userId":"62910b8f-4fd8-442a-bb45-016211983421","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\",\"requestedSubscription\":\"e2e-rate-iso-a-be3b01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a148c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-be3b01","namespace":"ai-tenant-e2e-shared-a-a148c7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-be3b01"} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62910b8f-4fd8-442a-bb45-016211983421","keyName":"e2e-rate-a-be3b01","selected_subscription":"e2e-rate-iso-a-be3b01","selected_subscription_key":"ai-tenant-e2e-shared-a-a148c7/e2e-rate-iso-a-be3b01@ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a148c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-be3b01","namespace":"ai-tenant-e2e-shared-a-a148c7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:49:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b0729b0-c9ff-4c86-a56c-38eee3f31d73","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4690ab54-d844-4663-92a7-95681548cdfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49240","PortSpecifier":{"PortValue":49240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4690ab54-d844-4663-92a7-95681548cdfd","method":"POST","path":"/ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7/v1/completions","host":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4690ab54-d844-4663-92a7-95681548cdfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49240","PortSpecifier":{"PortValue":49240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997360,"nanos":928686193},"http":{"id":"4690ab54-d844-4663-92a7-95681548cdfd","method":"POST","headers":{":authority":"e2e-shared-a-a148c7.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6aP3hULzDcCjwySK_xSYXdbkDLUA8BnNI0e54CgPSnoHY7PvKnQ9zfPrbEll"} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6aP3hULzDcCjwySK_xSYXdbkDLUA8BnNI0e54CgPSnoHY7PvKnQ9zfPrbEll\"}"} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62910b8f-4fd8-442a-bb45-016211983421","keyName":"e2e-rate-a-be3b01","subscription":"e2e-rate-iso-a-be3b01","tenant":"e2e-shared-a-a148c7","userId":"62910b8f-4fd8-442a-bb45-016211983421","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\",\"requestedSubscription\":\"e2e-rate-iso-a-be3b01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a148c7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a148c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-be3b01","namespace":"ai-tenant-e2e-shared-a-a148c7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4690ab54-d844-4663-92a7-95681548cdfd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a148c7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-be3b01"} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4690ab54-d844-4663-92a7-95681548cdfd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62910b8f-4fd8-442a-bb45-016211983421","keyName":"e2e-rate-a-be3b01","selected_subscription":"e2e-rate-iso-a-be3b01","selected_subscription_key":"ai-tenant-e2e-shared-a-a148c7/e2e-rate-iso-a-be3b01@ai-tenant-e2e-shared-a-a148c7/rate-test-model-a148c7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a148c7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-be3b01","namespace":"ai-tenant-e2e-shared-a-a148c7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4690ab54-d844-4663-92a7-95681548cdfd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:49:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4690ab54-d844-4663-92a7-95681548cdfd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51116","PortSpecifier":{"PortValue":51116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","method":"POST","path":"/ai-tenant-e2e-shared-b-c47335/rate-test-model-c47335/v1/completions","host":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51116","PortSpecifier":{"PortValue":51116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783997360,"nanos":986045732},"http":{"id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","method":"POST","headers":{":authority":"e2e-shared-b-c47335.apps.3e8e4236-a400-4de7-bc99-8144b313ce34.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c47335/rate-test-model-c47335/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16M6TqKW97kROtyU9_aa5IybSzw3vKUx7pjMhMyO8gRgFTyRjEMlqLytAaXf9"} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c47335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16M6TqKW97kROtyU9_aa5IybSzw3vKUx7pjMhMyO8gRgFTyRjEMlqLytAaXf9\"}"} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c47335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce449950-13b9-49ec-9831-1e75a54aaa20","keyName":"e2e-rate-b-be3b01","subscription":"e2e-rate-iso-b-be3b01","tenant":"e2e-shared-b-c47335","userId":"ce449950-13b9-49ec-9831-1e75a54aaa20","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c47335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c47335/rate-test-model-c47335\",\"requestedSubscription\":\"e2e-rate-iso-b-be3b01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c47335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c47335","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-be3b01","namespace":"ai-tenant-e2e-shared-b-c47335","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c47335/rate-test-model-c47335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c47335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-be3b01"} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ce449950-13b9-49ec-9831-1e75a54aaa20","keyName":"e2e-rate-b-be3b01","selected_subscription":"e2e-rate-iso-b-be3b01","selected_subscription_key":"ai-tenant-e2e-shared-b-c47335/e2e-rate-iso-b-be3b01@ai-tenant-e2e-shared-b-c47335/rate-test-model-c47335","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c47335","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-be3b01","namespace":"ai-tenant-e2e-shared-b-c47335","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T02:49:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2960776-f763-4c5d-91c5-a81b614fc5cd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T02:49:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5feca016793158ad8d9b9eb4b81e7077fbfcac62981c75caf63b2a6228b46f1"} {"level":"info","ts":"2026-07-14T02:49:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b744576edd82ca2e9e7810063865dd76ee53d4707f8aea02bc9bbaee6bccbca"} {"level":"info","ts":"2026-07-14T02:49:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153394fc9ad1a3b8a16793b38a416ebbc0634321ae70530858ba2d2035554ce1"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf5747bbb5d3753c420db4334e6bf2311ce9b048aae1255122cc57f11b0f0d8d"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7af719be9b4b8bca9435acff5b993f92c90651f43b2944b3a4dbec79259e7189"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08936335704e37222e951a1374afcdd6db192709cd3d651d96ce1cf01b623e87"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d681c075ff3f6dd1488af3bf8fb906cbf971fa28a1553f07adefe6f63e812578"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f06cf00383d5dbf506cb85254b8c4196ac67aff8408927d96819629548dbb135"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e90d77636174bf1f4c578ef348a2d51a898dc1d99c4baea559a7c59bf4db0b69"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b26a1422a1a13e814dab11a144dcfc5712a4726704a92e928531700fb8772daa"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/399ba600e76a85fdfe117a30d0620ff2683df41e7e11ebb3e912d2f8743ea1b0"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f6e4ffeaf3bc480db6ae4dc887be622688c7f4e90ff9d1d683761984efe794d"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/801ba9f71b48d781c3ab5838155623b4c349859aab307eebf3f83890fe144a3a"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aadf30bb4d0675f74074ef4ed9576a903502cdad1e5fc3bd0e81e90e080399f3"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b288943ff49857f8f43fff402604ba01a189d5c2777c1be35f2d3bc08007977b"} {"level":"info","ts":"2026-07-14T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d03eeadb2367e375cffc77fcdf7ed09a647f5acacfb2856a83322270f7b5e952"} {"level":"info","ts":"2026-07-14T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76ca4ce284806ccf3630c9464ec93b0554a6a933691dbdaf0542364d0f3f2a1f"} {"level":"info","ts":"2026-07-14T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8db38f46c68f63582358e5226f2ca93a7002e4796a120f48da7ce99795a4684"} {"level":"info","ts":"2026-07-14T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/370078cbbbbedce17485232ae34dbdde68c8ab0338149e3ecdb18e41cd1abfd3"} {"level":"info","ts":"2026-07-14T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0e0297e11ed276102b4bbf32cba0d1eaf219d916c4eb7010b6277385869d7b5"} {"level":"info","ts":"2026-07-14T02:50:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cd76269c1196a2873eee763c05d952c18de41316150d340d9f05f3be1eb4914"} {"level":"info","ts":"2026-07-14T02:50:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7d1603f1fdd026eba112f33eb38fb7fb6841d8f4f37b82ed627492c0516976e"} {"level":"info","ts":"2026-07-14T02:50:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c25cb87732317bba319fbf94cf598d1ad8b3f717bce093c5f04e5912a21e8b8"} {"level":"info","ts":"2026-07-14T02:50:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b40cd579e0e4d0726bb1045714fc63d9b235c1083e4b4305431efef97bb0a042"}