--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-15T17:21:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d207f0095100343c719c3fa48db2c2518ec163c3b942734e8833f106e38633d"} {"level":"info","ts":"2026-07-15T17:21:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fca9f9faf4281f65e9d81e321e80ec7c517713c751f1810b1627c2089f92277"} {"level":"info","ts":"2026-07-15T17:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25e368478bac10f544d39623350b436b851aa6ad25a6f7c6d53735c16740dc95"} {"level":"info","ts":"2026-07-15T17:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3b976082d40da1c4355bfd3d7289199f4454b39a20b07393b31dcf36a8013c8"} {"level":"info","ts":"2026-07-15T17:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/995b947314ff6df151ea7556789e4e6d53711fe0bbe79285359c00416f922c9d"} {"level":"info","ts":"2026-07-15T17:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36f2d81fcce245be55e62f430272007d0709c85deb4329372d57110e0a01263e"} {"level":"info","ts":"2026-07-15T17:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33c3fe7ca7cdf0fe50a5ae5dac69bcec1103da64abbbe96990197d2ece7c1391"} {"level":"info","ts":"2026-07-15T17:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9810c23329fa9b915bf562fcb12e671e9b85f383723818e4b8486ec2fd057b6a"} {"level":"info","ts":"2026-07-15T17:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d207f0095100343c719c3fa48db2c2518ec163c3b942734e8833f106e38633d"} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f"} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f"} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f"} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f"} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"} {"level":"info","ts":"2026-07-15T17:24:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46748da7e500491ad39cd967d98902ab7cd1c6eed03a3a2b58621c3d4a7605b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46748da7e500491ad39cd967d98902ab7cd1c6eed03a3a2b58621c3d4a7605b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46748da7e500491ad39cd967d98902ab7cd1c6eed03a3a2b58621c3d4a7605b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46748da7e500491ad39cd967d98902ab7cd1c6eed03a3a2b58621c3d4a7605b6"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46748da7e500491ad39cd967d98902ab7cd1c6eed03a3a2b58621c3d4a7605b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46748da7e500491ad39cd967d98902ab7cd1c6eed03a3a2b58621c3d4a7605b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46748da7e500491ad39cd967d98902ab7cd1c6eed03a3a2b58621c3d4a7605b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46748da7e500491ad39cd967d98902ab7cd1c6eed03a3a2b58621c3d4a7605b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46748da7e500491ad39cd967d98902ab7cd1c6eed03a3a2b58621c3d4a7605b6"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10"} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10"} {"level":"info","ts":"2026-07-15T17:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10"} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"104988718e85c2b0423a65e64351f0e1b6c255f8837cce9d73ac53f869fd1480","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"104988718e85c2b0423a65e64351f0e1b6c255f8837cce9d73ac53f869fd1480","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6715f70d199c82089c7baeb953c1b20a2b12d44bb9e378e4f4f68587bfb5380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/104988718e85c2b0423a65e64351f0e1b6c255f8837cce9d73ac53f869fd1480"} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6715f70d199c82089c7baeb953c1b20a2b12d44bb9e378e4f4f68587bfb5380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"104988718e85c2b0423a65e64351f0e1b6c255f8837cce9d73ac53f869fd1480","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["104988718e85c2b0423a65e64351f0e1b6c255f8837cce9d73ac53f869fd1480"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6715f70d199c82089c7baeb953c1b20a2b12d44bb9e378e4f4f68587bfb5380"} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"104988718e85c2b0423a65e64351f0e1b6c255f8837cce9d73ac53f869fd1480","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31bef58b18925c509c757a313037909b8435f17cb19ea85bb1ee3fb1016c106a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31bef58b18925c509c757a313037909b8435f17cb19ea85bb1ee3fb1016c106a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6715f70d199c82089c7baeb953c1b20a2b12d44bb9e378e4f4f68587bfb5380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6715f70d199c82089c7baeb953c1b20a2b12d44bb9e378e4f4f68587bfb5380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/104988718e85c2b0423a65e64351f0e1b6c255f8837cce9d73ac53f869fd1480"} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6715f70d199c82089c7baeb953c1b20a2b12d44bb9e378e4f4f68587bfb5380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31bef58b18925c509c757a313037909b8435f17cb19ea85bb1ee3fb1016c106a"} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"104988718e85c2b0423a65e64351f0e1b6c255f8837cce9d73ac53f869fd1480","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31bef58b18925c509c757a313037909b8435f17cb19ea85bb1ee3fb1016c106a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31bef58b18925c509c757a313037909b8435f17cb19ea85bb1ee3fb1016c106a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31bef58b18925c509c757a313037909b8435f17cb19ea85bb1ee3fb1016c106a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6715f70d199c82089c7baeb953c1b20a2b12d44bb9e378e4f4f68587bfb5380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab"} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31bef58b18925c509c757a313037909b8435f17cb19ea85bb1ee3fb1016c106a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10"} {"level":"error","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6715f70d199c82089c7baeb953c1b20a2b12d44bb9e378e4f4f68587bfb5380"} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/104988718e85c2b0423a65e64351f0e1b6c255f8837cce9d73ac53f869fd1480"} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31bef58b18925c509c757a313037909b8435f17cb19ea85bb1ee3fb1016c106a"} {"level":"info","ts":"2026-07-15T17:24:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f720c4940387864e1b080b7d55929bc619caf0256be8ffe14dfb0b3d4e56575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f720c4940387864e1b080b7d55929bc619caf0256be8ffe14dfb0b3d4e56575","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f720c4940387864e1b080b7d55929bc619caf0256be8ffe14dfb0b3d4e56575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f720c4940387864e1b080b7d55929bc619caf0256be8ffe14dfb0b3d4e56575"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f720c4940387864e1b080b7d55929bc619caf0256be8ffe14dfb0b3d4e56575","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f720c4940387864e1b080b7d55929bc619caf0256be8ffe14dfb0b3d4e56575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f720c4940387864e1b080b7d55929bc619caf0256be8ffe14dfb0b3d4e56575"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f720c4940387864e1b080b7d55929bc619caf0256be8ffe14dfb0b3d4e56575","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f720c4940387864e1b080b7d55929bc619caf0256be8ffe14dfb0b3d4e56575"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f720c4940387864e1b080b7d55929bc619caf0256be8ffe14dfb0b3d4e56575","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f720c4940387864e1b080b7d55929bc619caf0256be8ffe14dfb0b3d4e56575"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17"} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17"} {"level":"debug","ts":"2026-07-15T17:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa"} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"} {"level":"error","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa"} {"level":"error","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa"} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b"} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b"} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa"} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377"} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f"} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377"} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f"} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377"} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b"} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f"} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18"} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb"} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18"} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb"} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb"} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18"} {"level":"info","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43842","PortSpecifier":{"PortValue":43842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43842","PortSpecifier":{"PortValue":43842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136253,"nanos":292388040},"http":{"id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/auth-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d20f88d-aad6-4331-a278-f3fbf4e2b531","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46210","PortSpecifier":{"PortValue":46210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46210","PortSpecifier":{"PortValue":46210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136253,"nanos":356561145},"http":{"id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/auth-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93466f4b-da83-4741-8b4e-f7919a3dc43f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43848","PortSpecifier":{"PortValue":43848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbb06887-0656-4576-8324-e448e84ddbd8","method":"GET","path":"/maas-api/v1/api-keys/365378d9-78e1-47e3-a6a5-64b65a82865d","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43848","PortSpecifier":{"PortValue":43848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136253,"nanos":418214694},"http":{"id":"bbb06887-0656-4576-8324-e448e84ddbd8","method":"GET","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/365378d9-78e1-47e3-a6a5-64b65a82865d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/365378d9-78e1-47e3-a6a5-64b65a82865d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/auth-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbb06887-0656-4576-8324-e448e84ddbd8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46226","PortSpecifier":{"PortValue":46226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39294da9-cb4d-4112-a171-867a2ce107e8","method":"GET","path":"/maas-api/v1/api-keys/a5cc2e44-46fc-4bbc-b3df-77a34435b723","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46226","PortSpecifier":{"PortValue":46226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136253,"nanos":454928368},"http":{"id":"39294da9-cb4d-4112-a171-867a2ce107e8","method":"GET","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a5cc2e44-46fc-4bbc-b3df-77a34435b723",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a5cc2e44-46fc-4bbc-b3df-77a34435b723",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/auth-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39294da9-cb4d-4112-a171-867a2ce107e8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40238","PortSpecifier":{"PortValue":40238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8953838-a1c2-4805-918c-ce3c90488d8f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40238","PortSpecifier":{"PortValue":40238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136272,"nanos":620332667},"http":{"id":"b8953838-a1c2-4805-918c-ce3c90488d8f","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/auth-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8953838-a1c2-4805-918c-ce3c90488d8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:50548","PortSpecifier":{"PortValue":50548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:50548","PortSpecifier":{"PortValue":50548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136272,"nanos":664331138},"http":{"id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/auth-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cdd0575-f705-42bb-b442-61d0cb7350b8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b77286f-811f-43db-9ead-5d191edc583b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40240","PortSpecifier":{"PortValue":40240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b77286f-811f-43db-9ead-5d191edc583b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b77286f-811f-43db-9ead-5d191edc583b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40240","PortSpecifier":{"PortValue":40240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136272,"nanos":703308356},"http":{"id":"9b77286f-811f-43db-9ead-5d191edc583b","method":"GET","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b77286f-811f-43db-9ead-5d191edc583b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Sbt8nMiNOt6wSCRB_NGZzxqbyJdIpzm21k2j2tx5p7gXuYkJhI8FMSmx7DQE"} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b77286f-811f-43db-9ead-5d191edc583b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Sbt8nMiNOt6wSCRB_NGZzxqbyJdIpzm21k2j2tx5p7gXuYkJhI8FMSmx7DQE\"}"} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b77286f-811f-43db-9ead-5d191edc583b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"445689c4-e988-4c0b-a62b-a1cd30d903e1","keyName":"e2e-auth-iso-a-54c50e","subscription":"e2e-auth-iso-043e79","tenant":"e2e-shared-a-abaf36","userId":"445689c4-e988-4c0b-a62b-a1cd30d903e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b77286f-811f-43db-9ead-5d191edc583b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b77286f-811f-43db-9ead-5d191edc583b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b77286f-811f-43db-9ead-5d191edc583b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b77286f-811f-43db-9ead-5d191edc583b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/auth-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b77286f-811f-43db-9ead-5d191edc583b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b77286f-811f-43db-9ead-5d191edc583b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b77286f-811f-43db-9ead-5d191edc583b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-043e79"} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b77286f-811f-43db-9ead-5d191edc583b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b77286f-811f-43db-9ead-5d191edc583b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:24:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b77286f-811f-43db-9ead-5d191edc583b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35312","PortSpecifier":{"PortValue":35312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35312","PortSpecifier":{"PortValue":35312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136291,"nanos":932136946},"http":{"id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/auth-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a7c61ba-3652-9d76-a029-ee64e192b6ba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49750","PortSpecifier":{"PortValue":49750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00f5dc93-0aec-4464-9bd4-762130146d39","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49750","PortSpecifier":{"PortValue":49750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136291,"nanos":971335725},"http":{"id":"00f5dc93-0aec-4464-9bd4-762130146d39","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/auth-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:24:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00f5dc93-0aec-4464-9bd4-762130146d39","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:24:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c15e3f35-cbcb-4fdb-8cdb-26096784714f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49754","PortSpecifier":{"PortValue":49754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c15e3f35-cbcb-4fdb-8cdb-26096784714f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:24:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c15e3f35-cbcb-4fdb-8cdb-26096784714f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49754","PortSpecifier":{"PortValue":49754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136292,"nanos":13752315},"http":{"id":"c15e3f35-cbcb-4fdb-8cdb-26096784714f","method":"GET","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c15e3f35-cbcb-4fdb-8cdb-26096784714f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QTcn04n896yuaR7H_OFEnGQLI2EjKldFa06QMu40SzicD1TWhYK4gNOxaIv7"} {"level":"debug","ts":"2026-07-15T17:24:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c15e3f35-cbcb-4fdb-8cdb-26096784714f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1e0e66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QTcn04n896yuaR7H_OFEnGQLI2EjKldFa06QMu40SzicD1TWhYK4gNOxaIv7\"}"} {"level":"debug","ts":"2026-07-15T17:24:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c15e3f35-cbcb-4fdb-8cdb-26096784714f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e0e66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-15T17:24:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c15e3f35-cbcb-4fdb-8cdb-26096784714f","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:24:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15e3f35-cbcb-4fdb-8cdb-26096784714f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:24:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c15e3f35-cbcb-4fdb-8cdb-26096784714f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-15T17:24:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c15e3f35-cbcb-4fdb-8cdb-26096784714f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-15T17:24:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c15e3f35-cbcb-4fdb-8cdb-26096784714f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33270","PortSpecifier":{"PortValue":33270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33270","PortSpecifier":{"PortValue":33270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136311,"nanos":200094344},"http":{"id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/auth-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d64c66e1-4697-4dbb-a3cf-e2168c60bf2b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52782","PortSpecifier":{"PortValue":52782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52782","PortSpecifier":{"PortValue":52782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136311,"nanos":239361287},"http":{"id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/auth-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"baf6ddad-e633-46fb-96ed-5be195c6a8d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33276","PortSpecifier":{"PortValue":33276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33276","PortSpecifier":{"PortValue":33276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136311,"nanos":280042512},"http":{"id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/auth-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f097aedb-4dd8-4d1f-945e-f6c743e28fbe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52794","PortSpecifier":{"PortValue":52794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ad198e4-8851-4b3d-a521-8359ba817e56","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52794","PortSpecifier":{"PortValue":52794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136311,"nanos":325475198},"http":{"id":"1ad198e4-8851-4b3d-a521-8359ba817e56","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/auth-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ad198e4-8851-4b3d-a521-8359ba817e56","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44766","PortSpecifier":{"PortValue":44766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44766","PortSpecifier":{"PortValue":44766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136328,"nanos":392757917},"http":{"id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/auth-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17e9f1c9-0f28-4b0e-bef1-38dd0414a145","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33506","PortSpecifier":{"PortValue":33506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33506","PortSpecifier":{"PortValue":33506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136328,"nanos":431963439},"http":{"id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/auth-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0eec388b-607a-4f6d-9f1f-0bf4d39270c1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33516","PortSpecifier":{"PortValue":33516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"539958a3-73cf-43f5-84af-7e1f950de0a6","method":"GET","path":"/maas-api/v1/api-keys/fa69b3d6-3760-4753-b4be-f225e1f77304","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33516","PortSpecifier":{"PortValue":33516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136328,"nanos":469410997},"http":{"id":"539958a3-73cf-43f5-84af-7e1f950de0a6","method":"GET","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fa69b3d6-3760-4753-b4be-f225e1f77304",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fa69b3d6-3760-4753-b4be-f225e1f77304",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/auth-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"539958a3-73cf-43f5-84af-7e1f950de0a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44770","PortSpecifier":{"PortValue":44770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","method":"GET","path":"/maas-api/v1/api-keys/fa69b3d6-3760-4753-b4be-f225e1f77304","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44770","PortSpecifier":{"PortValue":44770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136328,"nanos":505448457},"http":{"id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","method":"GET","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fa69b3d6-3760-4753-b4be-f225e1f77304",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fa69b3d6-3760-4753-b4be-f225e1f77304",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/auth-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:25:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b70b7e56-93e9-41ce-b4b0-6a05c5576fcf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37432","PortSpecifier":{"PortValue":37432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36147ddd-5d05-44ef-a012-7138f84b34be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37432","PortSpecifier":{"PortValue":37432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136347,"nanos":704270045},"http":{"id":"36147ddd-5d05-44ef-a012-7138f84b34be","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/auth-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36147ddd-5d05-44ef-a012-7138f84b34be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35750","PortSpecifier":{"PortValue":35750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d6a9599-0efd-4778-af09-858f44a6f7de","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35750","PortSpecifier":{"PortValue":35750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136347,"nanos":742520614},"http":{"id":"6d6a9599-0efd-4778-af09-858f44a6f7de","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/auth-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d6a9599-0efd-4778-af09-858f44a6f7de","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37442","PortSpecifier":{"PortValue":37442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bce476b5-9868-4abf-acbd-19609b6173ff","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37442","PortSpecifier":{"PortValue":37442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136347,"nanos":777356906},"http":{"id":"bce476b5-9868-4abf-acbd-19609b6173ff","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EKweZubfUswNcgno_V8FU8YXkNTMC4rMa6NhEv9tEtsSv8lIvgbxDHPjLwu6"} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EKweZubfUswNcgno_V8FU8YXkNTMC4rMa6NhEv9tEtsSv8lIvgbxDHPjLwu6\"}"} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01bb089f-7617-45e1-8822-5bd9d8e03abd","keyName":"e2e-auth-iso-a-f7921c","subscription":"e2e-auth-iso-da0eb0","tenant":"e2e-shared-a-abaf36","userId":"01bb089f-7617-45e1-8822-5bd9d8e03abd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/auth-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-da0eb0"} {"level":"info","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bce476b5-9868-4abf-acbd-19609b6173ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6715f70d199c82089c7baeb953c1b20a2b12d44bb9e378e4f4f68587bfb5380"} {"level":"info","ts":"2026-07-15T17:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99fff171c37557a090573f8da8fa581846b749e771bac568806567008f915ca9"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fae57afa5d1b9e78c67f1ab21679a1a3d7cfb0648a25b4ba6294475ae60ccd0f"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d56f8f367b656a5efba1ae3e8323211903a7ec8fd4903a42b50b62cdda65e10"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3d7b9b0ca443019eb453a973b16cf90c3dcad92355a1dfe7c4944cdf0a65d17"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c75c330d8f76fcaea3d8d1e6a75f76453d69f1814b2000a60e477c10c076e503"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51f0c9b8817fb8c719b3558b88a84c3cfef7dd4e8da1fd530292e1e590a04efa"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/104988718e85c2b0423a65e64351f0e1b6c255f8837cce9d73ac53f869fd1480"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b54c2e8f7453f469f22568205756a7c815f458495d4d9d352b69a017ae4bbcb"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f720c4940387864e1b080b7d55929bc619caf0256be8ffe14dfb0b3d4e56575"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3bcf729b425d1abcb7d8aaaaefc53f417de3a24842bd89af2ff3d3e5ff8af18"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/954047017b75a910308f56bb6eadeb91c2ac046e1b5f6ac24af4c6cb352dea6b"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/474b7c5d4610b2cbd4d00b8ebca382eb24ee262c9b7e3d0c4fe08aab1b66b6ab"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46748da7e500491ad39cd967d98902ab7cd1c6eed03a3a2b58621c3d4a7605b6"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31bef58b18925c509c757a313037909b8435f17cb19ea85bb1ee3fb1016c106a"} {"level":"info","ts":"2026-07-15T17:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4d34b67928e2a04455a5e451e865c10053bd0403c016d2f7a153ec0cc29c19f"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"186156fd296e7e3c5eccf7b9478f46e35fb9748ea2cc47444bb98c9685991eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"186156fd296e7e3c5eccf7b9478f46e35fb9748ea2cc47444bb98c9685991eaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/186156fd296e7e3c5eccf7b9478f46e35fb9748ea2cc47444bb98c9685991eaa"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"186156fd296e7e3c5eccf7b9478f46e35fb9748ea2cc47444bb98c9685991eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["186156fd296e7e3c5eccf7b9478f46e35fb9748ea2cc47444bb98c9685991eaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"186156fd296e7e3c5eccf7b9478f46e35fb9748ea2cc47444bb98c9685991eaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"186156fd296e7e3c5eccf7b9478f46e35fb9748ea2cc47444bb98c9685991eaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/186156fd296e7e3c5eccf7b9478f46e35fb9748ea2cc47444bb98c9685991eaa"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"debug","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"debug","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"debug","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"debug","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"debug","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b"} {"level":"debug","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b"} {"level":"debug","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b"} {"level":"debug","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3"} {"level":"debug","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d"} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"error","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"error","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b"} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"186156fd296e7e3c5eccf7b9478f46e35fb9748ea2cc47444bb98c9685991eaa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/186156fd296e7e3c5eccf7b9478f46e35fb9748ea2cc47444bb98c9685991eaa"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065"} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf"} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"info","ts":"2026-07-15T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b"} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed"} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed"} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b"} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c"} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d"} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed"} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377"} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2"} {"level":"info","ts":"2026-07-15T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc"} {"level":"info","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:32836","PortSpecifier":{"PortValue":32836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:32836","PortSpecifier":{"PortValue":32836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136423,"nanos":582729428},"http":{"id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/sub-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5d15a6a-084d-43c2-9357-cb6ac3d10cfe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"261e399c-1ac8-4547-9522-8eb63956625c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58418","PortSpecifier":{"PortValue":58418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"261e399c-1ac8-4547-9522-8eb63956625c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"261e399c-1ac8-4547-9522-8eb63956625c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58418","PortSpecifier":{"PortValue":58418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136423,"nanos":629287274},"http":{"id":"261e399c-1ac8-4547-9522-8eb63956625c","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"261e399c-1ac8-4547-9522-8eb63956625c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"261e399c-1ac8-4547-9522-8eb63956625c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"261e399c-1ac8-4547-9522-8eb63956625c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"261e399c-1ac8-4547-9522-8eb63956625c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"261e399c-1ac8-4547-9522-8eb63956625c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"261e399c-1ac8-4547-9522-8eb63956625c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/sub-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"261e399c-1ac8-4547-9522-8eb63956625c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"261e399c-1ac8-4547-9522-8eb63956625c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"261e399c-1ac8-4547-9522-8eb63956625c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"261e399c-1ac8-4547-9522-8eb63956625c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"261e399c-1ac8-4547-9522-8eb63956625c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:32852","PortSpecifier":{"PortValue":32852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1c5d468-e516-428c-acd3-09d429bd3635","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:32852","PortSpecifier":{"PortValue":32852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136423,"nanos":671505799},"http":{"id":"e1c5d468-e516-428c-acd3-09d429bd3635","method":"GET","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cW7nxpId3VNMXBX6_sc8kAW2dkOjRKK9slIJsw0OzEhl7HyVlOoYq5K1yYMS"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cW7nxpId3VNMXBX6_sc8kAW2dkOjRKK9slIJsw0OzEhl7HyVlOoYq5K1yYMS\"}"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c328059f-a375-4891-9d7e-e7142db1acea","keyName":"e2e-sub-iso-3308c2","subscription":"e2e-a-only-f70029","tenant":"e2e-shared-a-abaf36","userId":"c328059f-a375-4891-9d7e-e7142db1acea","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/sub-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-f70029"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1c5d468-e516-428c-acd3-09d429bd3635","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58432","PortSpecifier":{"PortValue":58432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58432","PortSpecifier":{"PortValue":58432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136423,"nanos":716220649},"http":{"id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","method":"GET","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SzPsWoQ4wYrDs7Jk_ttGE3BBVFto0QEQpKrELTBkTdF5hrDauPtshkPTXtrc"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1e0e66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SzPsWoQ4wYrDs7Jk_ttGE3BBVFto0QEQpKrELTBkTdF5hrDauPtshkPTXtrc\"}"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e0e66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d8aee2da-224b-437e-9495-12f2d38f88ef","keyName":"e2e-sub-iso-755e3e","subscription":"e2e-b-only-f70029","tenant":"e2e-shared-b-1e0e66","userId":"d8aee2da-224b-437e-9495-12f2d38f88ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/sub-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-f70029"} {"level":"info","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cd468f4-c8b8-40fc-b90e-86cefc076ff2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48442","PortSpecifier":{"PortValue":48442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48442","PortSpecifier":{"PortValue":48442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136435,"nanos":804414659},"http":{"id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/sub-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f0fbed8-dee7-4176-a8fe-69c6263bf11f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41626","PortSpecifier":{"PortValue":41626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41626","PortSpecifier":{"PortValue":41626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136435,"nanos":845397108},"http":{"id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/sub-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca69c754-f774-4c3b-acad-41d6fa2303f7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48448","PortSpecifier":{"PortValue":48448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48448","PortSpecifier":{"PortValue":48448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136435,"nanos":880740609},"http":{"id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yfdUyASg3qowJpim_gab2TyPaD7qxsOyPNkSbeR49bqGdS51c8BGcqj1Ziyp"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yfdUyASg3qowJpim_gab2TyPaD7qxsOyPNkSbeR49bqGdS51c8BGcqj1Ziyp\"}"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"23e35c4d-7f96-4cdc-9c40-e7df5db3c327","keyName":"e2e-sub-iso-d0c2a2","subscription":"e2e-shared-sub-aa32f9","tenant":"e2e-shared-a-abaf36","userId":"23e35c4d-7f96-4cdc-9c40-e7df5db3c327","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/sub-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-aa32f9"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14a20976-e24a-4f2c-82db-6ddfd8b13976","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17534143-3388-41c8-b647-8d782f87f20e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41628","PortSpecifier":{"PortValue":41628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17534143-3388-41c8-b647-8d782f87f20e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17534143-3388-41c8-b647-8d782f87f20e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41628","PortSpecifier":{"PortValue":41628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136435,"nanos":915752353},"http":{"id":"17534143-3388-41c8-b647-8d782f87f20e","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17534143-3388-41c8-b647-8d782f87f20e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-h1zOBaWqWo6RkkxA_cbmtDY5ID31O7gipTvgwGVyz5HQXZRtb6B6ftzlVzUV"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17534143-3388-41c8-b647-8d782f87f20e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1e0e66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-h1zOBaWqWo6RkkxA_cbmtDY5ID31O7gipTvgwGVyz5HQXZRtb6B6ftzlVzUV\"}"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17534143-3388-41c8-b647-8d782f87f20e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e0e66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e90be5b3-7989-4a4d-be4d-adc18e56fdc9","keyName":"e2e-sub-iso-50357c","subscription":"e2e-shared-sub-aa32f9","tenant":"e2e-shared-b-1e0e66","userId":"e90be5b3-7989-4a4d-be4d-adc18e56fdc9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17534143-3388-41c8-b647-8d782f87f20e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17534143-3388-41c8-b647-8d782f87f20e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17534143-3388-41c8-b647-8d782f87f20e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17534143-3388-41c8-b647-8d782f87f20e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/sub-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17534143-3388-41c8-b647-8d782f87f20e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17534143-3388-41c8-b647-8d782f87f20e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"17534143-3388-41c8-b647-8d782f87f20e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17534143-3388-41c8-b647-8d782f87f20e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-aa32f9"} {"level":"info","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17534143-3388-41c8-b647-8d782f87f20e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17534143-3388-41c8-b647-8d782f87f20e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57aaad65d84c742f2e7adfd5a4190ee49060f9ced2d7ce0f92058a44466d5065"} {"level":"info","ts":"2026-07-15T17:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8cea68b8e336b447dc72bc9da3c7fb73133ed9f9d25ac5021835f5dae4930ed"} {"level":"info","ts":"2026-07-15T17:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a77fc6beac718f95574fafe7fbfab7ca8c5aef5091ac2a1afc4a9eee8db0a5a"} {"level":"info","ts":"2026-07-15T17:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1202c3122fba834961caccb63d0fd86b5bf32b09ba91ddc06205cf6431bdec5c"} {"level":"info","ts":"2026-07-15T17:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afb08b59c89d8d24c79a9040c03f3c96101165d3e889c7c68497980c6785a39d"} {"level":"info","ts":"2026-07-15T17:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07d692e4de863ddab9e5f1c5a41c9d068925ae85f2815f52570a829adef382e2"} {"level":"info","ts":"2026-07-15T17:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe2b3d70dd727175771bd3da7f43f09dec7fac71898c7a4a85caf63e5cd3048b"} {"level":"info","ts":"2026-07-15T17:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f841b07c6157ed75f08df5bd20874d29c507c8392b92be9369f598f0bdf53322"} {"level":"info","ts":"2026-07-15T17:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8f179005be0090722311f970d49b43126f257ba928493acf4de342f474363d3"} {"level":"info","ts":"2026-07-15T17:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d39cc7b1086b4312135462cf74668a130909be50764d02785ac2d84301fef2b"} {"level":"info","ts":"2026-07-15T17:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4780e10fb7e917369312da9cfb5dfd53673547c31e87d3a0ded8498bf7759c45"} {"level":"info","ts":"2026-07-15T17:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e1b2b9406669f92631a28b1a23477e8542c770d460a8fb953c436b192545bd8"} {"level":"info","ts":"2026-07-15T17:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f08f289608c2c19cb027c09af79ee7486f93061b06e6f51414df3d22a012bbd5"} {"level":"info","ts":"2026-07-15T17:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac1f020b1d9a872bac0c2d0ad2744ed72cd393de08a0c73408ab9822dcd9c8bc"} {"level":"info","ts":"2026-07-15T17:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/186156fd296e7e3c5eccf7b9478f46e35fb9748ea2cc47444bb98c9685991eaa"} {"level":"info","ts":"2026-07-15T17:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd171dbef3c02fcb6f51fb1ab7e70407b8878173c198b8db948802ee50930ecf"} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"debug","ts":"2026-07-15T17:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6805a65bd44f01b29ab6d1f5a62473e1186fed1601927dda57866b07d081ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6805a65bd44f01b29ab6d1f5a62473e1186fed1601927dda57866b07d081ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6805a65bd44f01b29ab6d1f5a62473e1186fed1601927dda57866b07d081ed"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6805a65bd44f01b29ab6d1f5a62473e1186fed1601927dda57866b07d081ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a6805a65bd44f01b29ab6d1f5a62473e1186fed1601927dda57866b07d081ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6805a65bd44f01b29ab6d1f5a62473e1186fed1601927dda57866b07d081ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6805a65bd44f01b29ab6d1f5a62473e1186fed1601927dda57866b07d081ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6805a65bd44f01b29ab6d1f5a62473e1186fed1601927dda57866b07d081ed"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba25160ddd1fe14bc1a2d4d62e8e41a49b04f550fc065118125b6ba16f47b72d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba25160ddd1fe14bc1a2d4d62e8e41a49b04f550fc065118125b6ba16f47b72d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba25160ddd1fe14bc1a2d4d62e8e41a49b04f550fc065118125b6ba16f47b72d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba25160ddd1fe14bc1a2d4d62e8e41a49b04f550fc065118125b6ba16f47b72d"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba25160ddd1fe14bc1a2d4d62e8e41a49b04f550fc065118125b6ba16f47b72d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba25160ddd1fe14bc1a2d4d62e8e41a49b04f550fc065118125b6ba16f47b72d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba25160ddd1fe14bc1a2d4d62e8e41a49b04f550fc065118125b6ba16f47b72d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a70fd5a31f1466547733558db11fd5f807a3c7c8990cfce1d10ce7ba0637ae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a70fd5a31f1466547733558db11fd5f807a3c7c8990cfce1d10ce7ba0637ae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba25160ddd1fe14bc1a2d4d62e8e41a49b04f550fc065118125b6ba16f47b72d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a70fd5a31f1466547733558db11fd5f807a3c7c8990cfce1d10ce7ba0637ae9"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a70fd5a31f1466547733558db11fd5f807a3c7c8990cfce1d10ce7ba0637ae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a70fd5a31f1466547733558db11fd5f807a3c7c8990cfce1d10ce7ba0637ae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba25160ddd1fe14bc1a2d4d62e8e41a49b04f550fc065118125b6ba16f47b72d"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a70fd5a31f1466547733558db11fd5f807a3c7c8990cfce1d10ce7ba0637ae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a70fd5a31f1466547733558db11fd5f807a3c7c8990cfce1d10ce7ba0637ae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d"} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a70fd5a31f1466547733558db11fd5f807a3c7c8990cfce1d10ce7ba0637ae9"} {"level":"info","ts":"2026-07-15T17:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d"} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"debug","ts":"2026-07-15T17:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"error","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"error","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1"} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994"} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1"} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994"} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26"} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26"} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26"} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f"} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f"} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26"} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f"} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f"} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f"} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f"} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f"} {"level":"debug","ts":"2026-07-15T17:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994"} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a70fd5a31f1466547733558db11fd5f807a3c7c8990cfce1d10ce7ba0637ae9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a70fd5a31f1466547733558db11fd5f807a3c7c8990cfce1d10ce7ba0637ae9"} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1"} {"level":"debug","ts":"2026-07-15T17:28:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:28:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:28:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:28:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba25160ddd1fe14bc1a2d4d62e8e41a49b04f550fc065118125b6ba16f47b72d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1"} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:28:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:28:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba25160ddd1fe14bc1a2d4d62e8e41a49b04f550fc065118125b6ba16f47b72d"} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d"} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1"} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T17:28:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T17:28:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26"} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T17:28:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T17:28:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6805a65bd44f01b29ab6d1f5a62473e1186fed1601927dda57866b07d081ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705"} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26"} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6805a65bd44f01b29ab6d1f5a62473e1186fed1601927dda57866b07d081ed"} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f"} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"} {"level":"info","ts":"2026-07-15T17:28:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"info","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37038","PortSpecifier":{"PortValue":37038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37038","PortSpecifier":{"PortValue":37038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136496,"nanos":79956472},"http":{"id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89aca7a7-a66f-4f22-ab12-fcd6e5ff4847","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:50468","PortSpecifier":{"PortValue":50468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:50468","PortSpecifier":{"PortValue":50468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136496,"nanos":124533177},"http":{"id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/rate-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"994408cd-2e39-4ec7-b78c-5716ef6e5517","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37048","PortSpecifier":{"PortValue":37048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","method":"POST","path":"/ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36/v1/completions","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37048","PortSpecifier":{"PortValue":37048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136496,"nanos":168189894},"http":{"id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AJMRushbS5YpHJLu_Dv6SxQEJf6vF3RAWAoQtb98Lum6NW5b5vQYWWtRidXM"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AJMRushbS5YpHJLu_Dv6SxQEJf6vF3RAWAoQtb98Lum6NW5b5vQYWWtRidXM\"}"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a78f0b37-dfc3-416f-8ebc-c41e3472315b","keyName":"e2e-rate-a-d710bf","subscription":"e2e-rate-iso-a-d710bf","tenant":"e2e-shared-a-abaf36","userId":"a78f0b37-dfc3-416f-8ebc-c41e3472315b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\",\"requestedSubscription\":\"e2e-rate-iso-a-d710bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-abaf36","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d710bf","namespace":"ai-tenant-e2e-shared-a-abaf36","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d710bf"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a78f0b37-dfc3-416f-8ebc-c41e3472315b","keyName":"e2e-rate-a-d710bf","selected_subscription":"e2e-rate-iso-a-d710bf","selected_subscription_key":"ai-tenant-e2e-shared-a-abaf36/e2e-rate-iso-a-d710bf@ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-abaf36","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d710bf","namespace":"ai-tenant-e2e-shared-a-abaf36","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:28:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a3ddd0a-aae8-4ad8-9cf8-a4a2b3e58a2d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37052","PortSpecifier":{"PortValue":37052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9956235-a64b-4d45-a303-92a9a90b64ed","method":"POST","path":"/ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36/v1/completions","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37052","PortSpecifier":{"PortValue":37052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136497,"nanos":227678967},"http":{"id":"a9956235-a64b-4d45-a303-92a9a90b64ed","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AJMRushbS5YpHJLu_Dv6SxQEJf6vF3RAWAoQtb98Lum6NW5b5vQYWWtRidXM"} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AJMRushbS5YpHJLu_Dv6SxQEJf6vF3RAWAoQtb98Lum6NW5b5vQYWWtRidXM\"}"} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a78f0b37-dfc3-416f-8ebc-c41e3472315b","keyName":"e2e-rate-a-d710bf","subscription":"e2e-rate-iso-a-d710bf","tenant":"e2e-shared-a-abaf36","userId":"a78f0b37-dfc3-416f-8ebc-c41e3472315b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\",\"requestedSubscription\":\"e2e-rate-iso-a-d710bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-abaf36","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d710bf","namespace":"ai-tenant-e2e-shared-a-abaf36","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d710bf"} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a78f0b37-dfc3-416f-8ebc-c41e3472315b","keyName":"e2e-rate-a-d710bf","selected_subscription":"e2e-rate-iso-a-d710bf","selected_subscription_key":"ai-tenant-e2e-shared-a-abaf36/e2e-rate-iso-a-d710bf@ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-abaf36","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d710bf","namespace":"ai-tenant-e2e-shared-a-abaf36","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:28:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9956235-a64b-4d45-a303-92a9a90b64ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a8f2410-512f-4c6a-801d-284f97615946","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37056","PortSpecifier":{"PortValue":37056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a8f2410-512f-4c6a-801d-284f97615946","method":"POST","path":"/ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36/v1/completions","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a8f2410-512f-4c6a-801d-284f97615946","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37056","PortSpecifier":{"PortValue":37056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136498,"nanos":269509825},"http":{"id":"8a8f2410-512f-4c6a-801d-284f97615946","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AJMRushbS5YpHJLu_Dv6SxQEJf6vF3RAWAoQtb98Lum6NW5b5vQYWWtRidXM"} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AJMRushbS5YpHJLu_Dv6SxQEJf6vF3RAWAoQtb98Lum6NW5b5vQYWWtRidXM\"}"} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a78f0b37-dfc3-416f-8ebc-c41e3472315b","keyName":"e2e-rate-a-d710bf","subscription":"e2e-rate-iso-a-d710bf","tenant":"e2e-shared-a-abaf36","userId":"a78f0b37-dfc3-416f-8ebc-c41e3472315b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\",\"requestedSubscription\":\"e2e-rate-iso-a-d710bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-abaf36","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d710bf","namespace":"ai-tenant-e2e-shared-a-abaf36","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a8f2410-512f-4c6a-801d-284f97615946","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d710bf"} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a8f2410-512f-4c6a-801d-284f97615946","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a78f0b37-dfc3-416f-8ebc-c41e3472315b","keyName":"e2e-rate-a-d710bf","selected_subscription":"e2e-rate-iso-a-d710bf","selected_subscription_key":"ai-tenant-e2e-shared-a-abaf36/e2e-rate-iso-a-d710bf@ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-abaf36","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d710bf","namespace":"ai-tenant-e2e-shared-a-abaf36","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a8f2410-512f-4c6a-801d-284f97615946","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:28:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a8f2410-512f-4c6a-801d-284f97615946","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52036","PortSpecifier":{"PortValue":52036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52036","PortSpecifier":{"PortValue":52036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136511,"nanos":133473954},"http":{"id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59d7e489-9eaa-43a5-b7c7-7599b5ab9798","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03472a23-eba7-4207-b786-17259f5704a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49512","PortSpecifier":{"PortValue":49512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03472a23-eba7-4207-b786-17259f5704a5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03472a23-eba7-4207-b786-17259f5704a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49512","PortSpecifier":{"PortValue":49512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136511,"nanos":181089574},"http":{"id":"03472a23-eba7-4207-b786-17259f5704a5","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03472a23-eba7-4207-b786-17259f5704a5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03472a23-eba7-4207-b786-17259f5704a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"]}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03472a23-eba7-4207-b786-17259f5704a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/125e8428ba6a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9969bbc2-10ce-4e6e-a463-31afbca68500"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecdd3407-f41f-4d93-8d96-62846d282c33","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03472a23-eba7-4207-b786-17259f5704a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03472a23-eba7-4207-b786-17259f5704a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03472a23-eba7-4207-b786-17259f5704a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/rate-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03472a23-eba7-4207-b786-17259f5704a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03472a23-eba7-4207-b786-17259f5704a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03472a23-eba7-4207-b786-17259f5704a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03472a23-eba7-4207-b786-17259f5704a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03472a23-eba7-4207-b786-17259f5704a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52042","PortSpecifier":{"PortValue":52042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","method":"POST","path":"/ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36/v1/completions","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52042","PortSpecifier":{"PortValue":52042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136511,"nanos":219832020},"http":{"id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13xsg65CzPqQqfEVA_bWaY3tPtrhwFz7S00NbsEjjdfbe3QOuX4EWLK3fHc33"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13xsg65CzPqQqfEVA_bWaY3tPtrhwFz7S00NbsEjjdfbe3QOuX4EWLK3fHc33\"}"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6cb7eac5-dc75-4be8-b761-142574ccd0a8","keyName":"e2e-rate-a-d802f3","subscription":"e2e-rate-iso-a-d802f3","tenant":"e2e-shared-a-abaf36","userId":"6cb7eac5-dc75-4be8-b761-142574ccd0a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\",\"requestedSubscription\":\"e2e-rate-iso-a-d802f3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-abaf36","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d802f3","namespace":"ai-tenant-e2e-shared-a-abaf36","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d802f3"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6cb7eac5-dc75-4be8-b761-142574ccd0a8","keyName":"e2e-rate-a-d802f3","selected_subscription":"e2e-rate-iso-a-d802f3","selected_subscription_key":"ai-tenant-e2e-shared-a-abaf36/e2e-rate-iso-a-d802f3@ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-abaf36","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d802f3","namespace":"ai-tenant-e2e-shared-a-abaf36","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:28:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4b8b008-9ff8-49d6-9d24-bebb2b7e6998","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39818","PortSpecifier":{"PortValue":39818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","method":"POST","path":"/ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36/v1/completions","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39818","PortSpecifier":{"PortValue":39818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136512,"nanos":259226015},"http":{"id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13xsg65CzPqQqfEVA_bWaY3tPtrhwFz7S00NbsEjjdfbe3QOuX4EWLK3fHc33"} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13xsg65CzPqQqfEVA_bWaY3tPtrhwFz7S00NbsEjjdfbe3QOuX4EWLK3fHc33\"}"} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6cb7eac5-dc75-4be8-b761-142574ccd0a8","keyName":"e2e-rate-a-d802f3","subscription":"e2e-rate-iso-a-d802f3","tenant":"e2e-shared-a-abaf36","userId":"6cb7eac5-dc75-4be8-b761-142574ccd0a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\",\"requestedSubscription\":\"e2e-rate-iso-a-d802f3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-abaf36","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d802f3","namespace":"ai-tenant-e2e-shared-a-abaf36","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d802f3"} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6cb7eac5-dc75-4be8-b761-142574ccd0a8","keyName":"e2e-rate-a-d802f3","selected_subscription":"e2e-rate-iso-a-d802f3","selected_subscription_key":"ai-tenant-e2e-shared-a-abaf36/e2e-rate-iso-a-d802f3@ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-abaf36","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d802f3","namespace":"ai-tenant-e2e-shared-a-abaf36","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:28:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0863e5b7-321a-4fff-b0ba-41a9d67a85c4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39830","PortSpecifier":{"PortValue":39830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","method":"POST","path":"/ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36/v1/completions","host":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39830","PortSpecifier":{"PortValue":39830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136513,"nanos":302432426},"http":{"id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","method":"POST","headers":{":authority":"e2e-shared-a-abaf36.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13xsg65CzPqQqfEVA_bWaY3tPtrhwFz7S00NbsEjjdfbe3QOuX4EWLK3fHc33"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13xsg65CzPqQqfEVA_bWaY3tPtrhwFz7S00NbsEjjdfbe3QOuX4EWLK3fHc33\"}"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6cb7eac5-dc75-4be8-b761-142574ccd0a8","keyName":"e2e-rate-a-d802f3","subscription":"e2e-rate-iso-a-d802f3","tenant":"e2e-shared-a-abaf36","userId":"6cb7eac5-dc75-4be8-b761-142574ccd0a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\",\"requestedSubscription\":\"e2e-rate-iso-a-d802f3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-abaf36.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-abaf36","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d802f3","namespace":"ai-tenant-e2e-shared-a-abaf36","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-abaf36/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d802f3"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6cb7eac5-dc75-4be8-b761-142574ccd0a8","keyName":"e2e-rate-a-d802f3","selected_subscription":"e2e-rate-iso-a-d802f3","selected_subscription_key":"ai-tenant-e2e-shared-a-abaf36/e2e-rate-iso-a-d802f3@ai-tenant-e2e-shared-a-abaf36/rate-test-model-abaf36","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-abaf36","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d802f3","namespace":"ai-tenant-e2e-shared-a-abaf36","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d595cc4-2eaa-48d5-b213-f4a9aba73c24","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"038f130e-2999-41bd-a045-95bc2da040bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38858","PortSpecifier":{"PortValue":38858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"038f130e-2999-41bd-a045-95bc2da040bc","method":"POST","path":"/ai-tenant-e2e-shared-b-1e0e66/rate-test-model-1e0e66/v1/completions","host":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"038f130e-2999-41bd-a045-95bc2da040bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38858","PortSpecifier":{"PortValue":38858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784136513,"nanos":338551921},"http":{"id":"038f130e-2999-41bd-a045-95bc2da040bc","method":"POST","headers":{":authority":"e2e-shared-b-1e0e66.apps.62eb2e74-6bd1-43f4-a24b-125e8428ba6a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1e0e66/rate-test-model-1e0e66/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SM8KmPnoLD3pHWcl_Ur04cqnHw1aAkq8AZpb8b1TbtNnkR8Iefrn1RUJJR5V"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1e0e66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SM8KmPnoLD3pHWcl_Ur04cqnHw1aAkq8AZpb8b1TbtNnkR8Iefrn1RUJJR5V\"}"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e0e66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f72b663e-e006-478b-bd75-62d0ee7f5e79","keyName":"e2e-rate-b-d802f3","subscription":"e2e-rate-iso-b-d802f3","tenant":"e2e-shared-b-1e0e66","userId":"f72b663e-e006-478b-bd75-62d0ee7f5e79","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1e0e66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1e0e66/rate-test-model-1e0e66\",\"requestedSubscription\":\"e2e-rate-iso-b-d802f3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e0e66.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1e0e66","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d802f3","namespace":"ai-tenant-e2e-shared-b-1e0e66","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"038f130e-2999-41bd-a045-95bc2da040bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e0e66/rate-test-model-1e0e66\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e0e66/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d802f3"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"038f130e-2999-41bd-a045-95bc2da040bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f72b663e-e006-478b-bd75-62d0ee7f5e79","keyName":"e2e-rate-b-d802f3","selected_subscription":"e2e-rate-iso-b-d802f3","selected_subscription_key":"ai-tenant-e2e-shared-b-1e0e66/e2e-rate-iso-b-d802f3@ai-tenant-e2e-shared-b-1e0e66/rate-test-model-1e0e66","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1e0e66","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d802f3","namespace":"ai-tenant-e2e-shared-b-1e0e66","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"038f130e-2999-41bd-a045-95bc2da040bc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T17:28:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"038f130e-2999-41bd-a045-95bc2da040bc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/785c6124f762cd0b63e1a01be0ed4869e118706bc1bad07e915cea1597e9596a"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53a3044943828cbfab0f463c2a18f75e32492bf721ca9d746b7b4b866a991a32"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43298ac62f46a8e23b6a2741064cae9f1ab166dd4bbebc9fd96be5c624de7312"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e2b8e146555a4ddb2db8b65d3ef0eae7cdac476e30ee026e528c2775209e81f"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62f8ce8f8f6877aa500eb8e2ac3977dcc6b9afea0d462cf8ce5c22c41b5e0f86"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee47e560e51486b58b9d39469e45051eb4bcacb802aa8748e2372a380d3d1b17"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a3846ba629d68fdaf3cca43bf3608cdd1077493be873204ff76e3ed56c4a7e1"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba25160ddd1fe14bc1a2d4d62e8e41a49b04f550fc065118125b6ba16f47b72d"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7220864992183f03fc85f65894551dd73839b97dc150d47017866dfb07765f0c"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a70fd5a31f1466547733558db11fd5f807a3c7c8990cfce1d10ce7ba0637ae9"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/705b651e5152ce62c60369f531e0e959ce95a3394825bb3f3e02997c72699f1d"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c8d6837610fcc7a11997c772257e4fc81825db82c6c5d06fbcb06d6ae4ef26"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff5d39bbe249df7eb2f5b6840795427c26716bc658287a1c417813c8f116629e"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/197004cca69b4eb0ab8f8ea107bffc0b7679422b78d1b79df61cd73bf6414705"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a6805a65bd44f01b29ab6d1f5a62473e1186fed1601927dda57866b07d081ed"} {"level":"info","ts":"2026-07-15T17:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b4c21472a236b878ddb23d86d32165fe8bcdb5c2f3a4084fca784bfaa491994"} {"level":"info","ts":"2026-07-15T17:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/098a55d6bd777499689981310f2c1bd7c4061eb7fa9b4d5eb6802d0602cf7bbd"} {"level":"info","ts":"2026-07-15T17:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14b418bd9416e6961c7d92fe5fdcb828f84ba18a7bb7ed06c43a8e76b454fa65"} {"level":"info","ts":"2026-07-15T17:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3f8883857a70c83486623a635bffb0b1f97c3c60fcbf6028ac7083d2373877f"} {"level":"info","ts":"2026-07-15T17:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68361dcbf90331846f9e694729da2bdbb0089b18639c574bc419933c65eb9c7d"} {"level":"info","ts":"2026-07-15T17:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91689f6d157a370293b43e5bf9ec41284519bfe30705be829a8d48fe9182456b"} {"level":"info","ts":"2026-07-15T17:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58a9a179cb060377cceaf1b8628b579ff4499828ce88f14f659fce2e99e5ed93"} {"level":"info","ts":"2026-07-15T17:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a40f3d21a993cf2dbd2d106551a5c6c3c8d543cb6ac9a9843561c8188b98377"} {"level":"info","ts":"2026-07-15T17:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9e6a78d92e92886c2384c6a491a70cbade60ac36fcc93caed15cc1e9b68a93a"}