--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"debug","ts":"2026-07-27T20:50:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:50:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49192","PortSpecifier":{"PortValue":49192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49192","PortSpecifier":{"PortValue":49192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185436,"nanos":845592103},"http":{"id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/auth-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"797236b2-90ae-48e5-8dac-b9f1e43f21be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36526","PortSpecifier":{"PortValue":36526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36526","PortSpecifier":{"PortValue":36526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185436,"nanos":885256980},"http":{"id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","method":"POST","headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21ded0/auth-test-model-21ded0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d48497f-58bd-4706-8ec6-cd6e2ed954bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49204","PortSpecifier":{"PortValue":49204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88d550e8-4011-463f-af3a-f14be7eb9628","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49204","PortSpecifier":{"PortValue":49204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185436,"nanos":924350881},"http":{"id":"88d550e8-4011-463f-af3a-f14be7eb9628","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/auth-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88d550e8-4011-463f-af3a-f14be7eb9628","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36536","PortSpecifier":{"PortValue":36536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36536","PortSpecifier":{"PortValue":36536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185436,"nanos":963928044},"http":{"id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","method":"POST","headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21ded0/auth-test-model-21ded0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d71d2d4b-c70e-4d49-8b21-1b7b0929c748","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"info","ts":"2026-07-27T20:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"} {"level":"info","ts":"2026-07-27T20:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"info","ts":"2026-07-27T20:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646"} {"level":"info","ts":"2026-07-27T20:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"info","ts":"2026-07-27T20:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:50:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:50:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:50:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"} {"level":"info","ts":"2026-07-27T20:50:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"} {"level":"info","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47134","PortSpecifier":{"PortValue":47134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e04f92da-00c7-449c-ba40-b67d95e38b28","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47134","PortSpecifier":{"PortValue":47134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185480,"nanos":107939900},"http":{"id":"e04f92da-00c7-449c-ba40-b67d95e38b28","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/auth-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e04f92da-00c7-449c-ba40-b67d95e38b28","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbc3736b-6741-4a2a-be58-910bda826047","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44978","PortSpecifier":{"PortValue":44978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbc3736b-6741-4a2a-be58-910bda826047","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbc3736b-6741-4a2a-be58-910bda826047","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44978","PortSpecifier":{"PortValue":44978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185480,"nanos":152558242},"http":{"id":"dbc3736b-6741-4a2a-be58-910bda826047","method":"POST","headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dbc3736b-6741-4a2a-be58-910bda826047","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbc3736b-6741-4a2a-be58-910bda826047","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbc3736b-6741-4a2a-be58-910bda826047","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbc3736b-6741-4a2a-be58-910bda826047","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbc3736b-6741-4a2a-be58-910bda826047","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbc3736b-6741-4a2a-be58-910bda826047","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21ded0/auth-test-model-21ded0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dbc3736b-6741-4a2a-be58-910bda826047","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbc3736b-6741-4a2a-be58-910bda826047","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbc3736b-6741-4a2a-be58-910bda826047","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbc3736b-6741-4a2a-be58-910bda826047","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbc3736b-6741-4a2a-be58-910bda826047","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44984","PortSpecifier":{"PortValue":44984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84305a5f-ec7f-4050-8e8b-c212d700164b","method":"GET","path":"/maas-api/v1/api-keys/071c80a4-5c6d-48eb-aa4a-3e64ea8796dc","host":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44984","PortSpecifier":{"PortValue":44984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185480,"nanos":194316864},"http":{"id":"84305a5f-ec7f-4050-8e8b-c212d700164b","method":"GET","headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/071c80a4-5c6d-48eb-aa4a-3e64ea8796dc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/071c80a4-5c6d-48eb-aa4a-3e64ea8796dc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21ded0/auth-test-model-21ded0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84305a5f-ec7f-4050-8e8b-c212d700164b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47146","PortSpecifier":{"PortValue":47146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","method":"GET","path":"/maas-api/v1/api-keys/071c80a4-5c6d-48eb-aa4a-3e64ea8796dc","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47146","PortSpecifier":{"PortValue":47146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185480,"nanos":229958327},"http":{"id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","method":"GET","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/071c80a4-5c6d-48eb-aa4a-3e64ea8796dc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/071c80a4-5c6d-48eb-aa4a-3e64ea8796dc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/auth-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b52a4f76-7e63-42b1-99ff-a77be4ead6d6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"} {"level":"info","ts":"2026-07-27T20:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646"} {"level":"info","ts":"2026-07-27T20:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"info","ts":"2026-07-27T20:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"info","ts":"2026-07-27T20:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"} {"level":"info","ts":"2026-07-27T20:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"info","ts":"2026-07-27T20:51:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"} {"level":"error","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"error","ts":"2026-07-27T20:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58820","PortSpecifier":{"PortValue":58820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58820","PortSpecifier":{"PortValue":58820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185525,"nanos":499788405},"http":{"id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/auth-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44b9d9b9-2c65-4aac-a2b7-701e9ed7cd79","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41238","PortSpecifier":{"PortValue":41238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41238","PortSpecifier":{"PortValue":41238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185525,"nanos":540081414},"http":{"id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","method":"POST","headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21ded0/auth-test-model-21ded0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e20ed4ff-1f84-4e18-97f3-9591b4f0755f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58824","PortSpecifier":{"PortValue":58824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58824","PortSpecifier":{"PortValue":58824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185525,"nanos":582858652},"http":{"id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Kosw8LcQNb7GCYuf_JT7q2ayWodOTQ9goZnpOurk26GzhB9jhwlkCWiZibB0"} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Kosw8LcQNb7GCYuf_JT7q2ayWodOTQ9goZnpOurk26GzhB9jhwlkCWiZibB0\"}"} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"240db372-3da2-4653-84fb-3698302eb6cb","keyName":"e2e-auth-iso-a-cab1b3","subscription":"e2e-auth-iso-2816f0","tenant":"e2e-shared-a-4af3f5","userId":"240db372-3da2-4653-84fb-3698302eb6cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/auth-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-2816f0"} {"level":"info","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8c7b89c-8969-4ff3-ac3f-fdbdd5d518f1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"} {"level":"info","ts":"2026-07-27T20:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74377d38218d2c0b822d4690fb37f06f1e5b82618a348269ede4b3a530197b6f"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a018cce08f08ebecd89beb1c1f14eac05326192d42a56df49c93b37f880e07a"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cc9a1a06b78ee90438e95e5e4b0e2ac883c055215c744898af33fe806bef78e"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e50aea92f4577e4f01ace9e2f87df38b0171c223aab30a84a96da28d1a8d88c2"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b2102f72d3f24f4612f895e402e4c5623381a819341606deb8c748cfefc8646"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf03ea953d27d4e14d34eb03e81152f74150e553842fe8e4bdcf0d3d7fef846d"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0afc873b193ad9fc97f14964eb24b1b7b4e5fa06c13c0dc6bfc86f9bf638b75a"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a7a83f5370fdc3257d5d6e7bf80aa06a96381975357f1e310778aaf2eb9735c"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79722c0bb8c998deec14dad5ae718b4f0ab75e67e34057053a34aa867ac46506"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e46fc7f37ec076abce0a8e31c3d111115eb2e0973c1095f4290c903988bac646"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/942ec04cae5c917e0db53028638736dc6e9faa530da9a95b5e1ed041f1f1d5b3"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9eef24e0983c1892642339dfeeda3dc1a22707be986268871a5540155e83c64d"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12fa0aa4378dcdf650af09ac9b636edc017a85eca475b4517fe341c293a8c134"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c55fd44e9f079e65d68bb4065b3bb752dd6c66f79822e34fa5a9e85a8c7e0b44"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02266d183db54c9f8c65582030d6590d3e4cb937ab88b10d0973c53844ce31af"} {"level":"info","ts":"2026-07-27T20:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0679efb8191a0a613e5bfe62028c23ebdc3a47e7a36f8a9dc4b891679105522e"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"} {"level":"error","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52"} {"level":"error","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"} {"level":"info","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d46632e35a37765444013ca75289d8759e8dbcd70846a4471e93fc6007bfdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d46632e35a37765444013ca75289d8759e8dbcd70846a4471e93fc6007bfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d46632e35a37765444013ca75289d8759e8dbcd70846a4471e93fc6007bfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d46632e35a37765444013ca75289d8759e8dbcd70846a4471e93fc6007bfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d46632e35a37765444013ca75289d8759e8dbcd70846a4471e93fc6007bfdc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d46632e35a37765444013ca75289d8759e8dbcd70846a4471e93fc6007bfdc"} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d46632e35a37765444013ca75289d8759e8dbcd70846a4471e93fc6007bfdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61d46632e35a37765444013ca75289d8759e8dbcd70846a4471e93fc6007bfdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d46632e35a37765444013ca75289d8759e8dbcd70846a4471e93fc6007bfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d46632e35a37765444013ca75289d8759e8dbcd70846a4471e93fc6007bfdc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33"} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d46632e35a37765444013ca75289d8759e8dbcd70846a4471e93fc6007bfdc"} {"level":"error","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c2d0fc3d98789eb9e2cd45a633691086b11c3f46e3d9a55fd0d7eebf544484c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c2d0fc3d98789eb9e2cd45a633691086b11c3f46e3d9a55fd0d7eebf544484c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c2d0fc3d98789eb9e2cd45a633691086b11c3f46e3d9a55fd0d7eebf544484c"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c2d0fc3d98789eb9e2cd45a633691086b11c3f46e3d9a55fd0d7eebf544484c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c2d0fc3d98789eb9e2cd45a633691086b11c3f46e3d9a55fd0d7eebf544484c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c2d0fc3d98789eb9e2cd45a633691086b11c3f46e3d9a55fd0d7eebf544484c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c2d0fc3d98789eb9e2cd45a633691086b11c3f46e3d9a55fd0d7eebf544484c"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c01f4cee7c8dbf8a6301ce07aa87b0b72a9e93405184f875aa1f15c8badcc89"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c2d0fc3d98789eb9e2cd45a633691086b11c3f46e3d9a55fd0d7eebf544484c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c01f4cee7c8dbf8a6301ce07aa87b0b72a9e93405184f875aa1f15c8badcc89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c01f4cee7c8dbf8a6301ce07aa87b0b72a9e93405184f875aa1f15c8badcc89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc947907a197918c25a95e5b8f65e96a8c3fc7088b6d8157c35f4c77f3e753d9"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c01f4cee7c8dbf8a6301ce07aa87b0b72a9e93405184f875aa1f15c8badcc89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c01f4cee7c8dbf8a6301ce07aa87b0b72a9e93405184f875aa1f15c8badcc89"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc947907a197918c25a95e5b8f65e96a8c3fc7088b6d8157c35f4c77f3e753d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc947907a197918c25a95e5b8f65e96a8c3fc7088b6d8157c35f4c77f3e753d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc947907a197918c25a95e5b8f65e96a8c3fc7088b6d8157c35f4c77f3e753d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc947907a197918c25a95e5b8f65e96a8c3fc7088b6d8157c35f4c77f3e753d9"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c01f4cee7c8dbf8a6301ce07aa87b0b72a9e93405184f875aa1f15c8badcc89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc947907a197918c25a95e5b8f65e96a8c3fc7088b6d8157c35f4c77f3e753d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806"} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806"} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806"} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a"} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a"} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a"} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80431c58ce05455789736d8135bfe5731beb954f88e98bf0ae61e5fc99487768","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80431c58ce05455789736d8135bfe5731beb954f88e98bf0ae61e5fc99487768"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80431c58ce05455789736d8135bfe5731beb954f88e98bf0ae61e5fc99487768","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf91a9bfaeba4cb6cb9148f0eb5132f3c250633a1a47f983ebed3463836428e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf91a9bfaeba4cb6cb9148f0eb5132f3c250633a1a47f983ebed3463836428e"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80431c58ce05455789736d8135bfe5731beb954f88e98bf0ae61e5fc99487768"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf91a9bfaeba4cb6cb9148f0eb5132f3c250633a1a47f983ebed3463836428e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcd30096233c82d592e15d89abfd88b22a687eeb13cff8d17d6a6435173fc0c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcd30096233c82d592e15d89abfd88b22a687eeb13cff8d17d6a6435173fc0c6"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcd30096233c82d592e15d89abfd88b22a687eeb13cff8d17d6a6435173fc0c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80431c58ce05455789736d8135bfe5731beb954f88e98bf0ae61e5fc99487768","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80431c58ce05455789736d8135bfe5731beb954f88e98bf0ae61e5fc99487768"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80431c58ce05455789736d8135bfe5731beb954f88e98bf0ae61e5fc99487768","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d95183a8a132338f58cca6f8108a13acb5fb909926a0552b9a627bf709e71447"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d95183a8a132338f58cca6f8108a13acb5fb909926a0552b9a627bf709e71447","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d95183a8a132338f58cca6f8108a13acb5fb909926a0552b9a627bf709e71447"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf91a9bfaeba4cb6cb9148f0eb5132f3c250633a1a47f983ebed3463836428e"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d95183a8a132338f58cca6f8108a13acb5fb909926a0552b9a627bf709e71447","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf91a9bfaeba4cb6cb9148f0eb5132f3c250633a1a47f983ebed3463836428e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bf91a9bfaeba4cb6cb9148f0eb5132f3c250633a1a47f983ebed3463836428e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcd30096233c82d592e15d89abfd88b22a687eeb13cff8d17d6a6435173fc0c6"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf91a9bfaeba4cb6cb9148f0eb5132f3c250633a1a47f983ebed3463836428e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcd30096233c82d592e15d89abfd88b22a687eeb13cff8d17d6a6435173fc0c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcd30096233c82d592e15d89abfd88b22a687eeb13cff8d17d6a6435173fc0c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80431c58ce05455789736d8135bfe5731beb954f88e98bf0ae61e5fc99487768"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcd30096233c82d592e15d89abfd88b22a687eeb13cff8d17d6a6435173fc0c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80431c58ce05455789736d8135bfe5731beb954f88e98bf0ae61e5fc99487768","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d95183a8a132338f58cca6f8108a13acb5fb909926a0552b9a627bf709e71447","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf91a9bfaeba4cb6cb9148f0eb5132f3c250633a1a47f983ebed3463836428e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcd30096233c82d592e15d89abfd88b22a687eeb13cff8d17d6a6435173fc0c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:53:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d95183a8a132338f58cca6f8108a13acb5fb909926a0552b9a627bf709e71447"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf91a9bfaeba4cb6cb9148f0eb5132f3c250633a1a47f983ebed3463836428e"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcd30096233c82d592e15d89abfd88b22a687eeb13cff8d17d6a6435173fc0c6"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455"} {"level":"info","ts":"2026-07-27T20:53:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56890","PortSpecifier":{"PortValue":56890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a080331-979d-9324-8e0a-0df855ffdddb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56890","PortSpecifier":{"PortValue":56890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185610,"nanos":254351201},"http":{"id":"6a080331-979d-9324-8e0a-0df855ffdddb","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/sub-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a080331-979d-9324-8e0a-0df855ffdddb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35698","PortSpecifier":{"PortValue":35698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cba748df-b73c-46f9-99e1-38a385cdd11b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35698","PortSpecifier":{"PortValue":35698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185610,"nanos":305524305},"http":{"id":"cba748df-b73c-46f9-99e1-38a385cdd11b","method":"POST","headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21ded0/sub-test-model-21ded0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba748df-b73c-46f9-99e1-38a385cdd11b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56898","PortSpecifier":{"PortValue":56898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56898","PortSpecifier":{"PortValue":56898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185610,"nanos":344976039},"http":{"id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","method":"GET","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MKP8uRmHktXbJhcz_OQXBTzdOx8ceFf0SZ3ynCyCMdqyWGexNQLBLSmkcaEx"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MKP8uRmHktXbJhcz_OQXBTzdOx8ceFf0SZ3ynCyCMdqyWGexNQLBLSmkcaEx\"}"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"273aee52-317e-41fd-aca4-c530f8de9217","keyName":"e2e-sub-iso-f72803","subscription":"e2e-a-only-c41f3e","tenant":"e2e-shared-a-4af3f5","userId":"273aee52-317e-41fd-aca4-c530f8de9217","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/sub-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-c41f3e"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aee668dc-0ce2-4d8f-92b8-0aa8de45e919","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35710","PortSpecifier":{"PortValue":35710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"088890d3-174c-41d0-873b-cacd4dd9b604","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35710","PortSpecifier":{"PortValue":35710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185610,"nanos":387631502},"http":{"id":"088890d3-174c-41d0-873b-cacd4dd9b604","method":"GET","headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cELog8WPV1JPzFQm_q8uq9YR9GngAqtRgNmmzS6KDoCcNFKMpQD510c2dErh"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-21ded0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cELog8WPV1JPzFQm_q8uq9YR9GngAqtRgNmmzS6KDoCcNFKMpQD510c2dErh\"}"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21ded0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0edbf398-afbd-4f62-94bd-4ab9a2f4fc31","keyName":"e2e-sub-iso-bc95ee","subscription":"e2e-b-only-c41f3e","tenant":"e2e-shared-b-21ded0","userId":"0edbf398-afbd-4f62-94bd-4ab9a2f4fc31","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21ded0/sub-test-model-21ded0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-c41f3e"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:53:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"088890d3-174c-41d0-873b-cacd4dd9b604","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34700","PortSpecifier":{"PortValue":34700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34700","PortSpecifier":{"PortValue":34700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185633,"nanos":217953630},"http":{"id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/sub-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d2b983b-e7cf-456b-a205-819d2517b1d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52228","PortSpecifier":{"PortValue":52228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec192104-e35f-4a99-b7c2-6648b7abad18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52228","PortSpecifier":{"PortValue":52228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185633,"nanos":268603942},"http":{"id":"ec192104-e35f-4a99-b7c2-6648b7abad18","method":"POST","headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21ded0/sub-test-model-21ded0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec192104-e35f-4a99-b7c2-6648b7abad18","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34706","PortSpecifier":{"PortValue":34706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af4c92cd-34c2-434e-989b-749cfb493db6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34706","PortSpecifier":{"PortValue":34706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185633,"nanos":324326311},"http":{"id":"af4c92cd-34c2-434e-989b-749cfb493db6","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XaB7XvFeIQum3Uih_7GTwNJ1dLxzHbd3SImM3gBLhAVN8zTKVkX9xRmM3kZ9"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XaB7XvFeIQum3Uih_7GTwNJ1dLxzHbd3SImM3gBLhAVN8zTKVkX9xRmM3kZ9\"}"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cba2ce11-ee1b-46f9-b5b6-c0a107c6ae8d","keyName":"e2e-sub-iso-151316","subscription":"e2e-shared-sub-30a44b","tenant":"e2e-shared-a-4af3f5","userId":"cba2ce11-ee1b-46f9-b5b6-c0a107c6ae8d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/sub-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-30a44b"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af4c92cd-34c2-434e-989b-749cfb493db6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52240","PortSpecifier":{"PortValue":52240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54d2c770-fe3f-4f41-8973-bf011807f874","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:52240","PortSpecifier":{"PortValue":52240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185633,"nanos":358042984},"http":{"id":"54d2c770-fe3f-4f41-8973-bf011807f874","method":"POST","headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GA7sr38ZpwKHTtgM_a4pQJBmzpKT1QyB11IqQMSXhjxNA7sin6Q5rjjoKQhp"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-21ded0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GA7sr38ZpwKHTtgM_a4pQJBmzpKT1QyB11IqQMSXhjxNA7sin6Q5rjjoKQhp\"}"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21ded0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba720e89-3882-4d3c-8a45-83f551923b9d","keyName":"e2e-sub-iso-3055e5","subscription":"e2e-shared-sub-30a44b","tenant":"e2e-shared-b-21ded0","userId":"ba720e89-3882-4d3c-8a45-83f551923b9d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21ded0/sub-test-model-21ded0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-30a44b"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:53:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54d2c770-fe3f-4f41-8973-bf011807f874","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11c55e512708811c2033629a3ee007d197569e7deaf995d372f3f5021c5f0455"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcd30096233c82d592e15d89abfd88b22a687eeb13cff8d17d6a6435173fc0c6"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e147be394e5362ec158d7c3251e90ee048cae5d59b1a5142a3e188471cb4a3a"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bf91a9bfaeba4cb6cb9148f0eb5132f3c250633a1a47f983ebed3463836428e"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80431c58ce05455789736d8135bfe5731beb954f88e98bf0ae61e5fc99487768"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/546455bf6d722eeae4b28d53e14b4379fdd9dfeeae13a0b8556a8be68e0229a3"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61d46632e35a37765444013ca75289d8759e8dbcd70846a4471e93fc6007bfdc"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d95183a8a132338f58cca6f8108a13acb5fb909926a0552b9a627bf709e71447"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc947907a197918c25a95e5b8f65e96a8c3fc7088b6d8157c35f4c77f3e753d9"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fc13adcad03fc39e485fcb3cb1a2076da355bb683b589abc8f2958d37abd993"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc853f1a4cee1d6675342a61a3bd2b40e5ffda8197f4b4826464822d53040f52"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c2d0fc3d98789eb9e2cd45a633691086b11c3f46e3d9a55fd0d7eebf544484c"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c01f4cee7c8dbf8a6301ce07aa87b0b72a9e93405184f875aa1f15c8badcc89"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f1628dba49b59b10174954a2f4d105b36d9262d7564a64dc72c364b0338292e"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5acc733e02d3c321b990f5a170ba12b35ccdb0e80844a48bc4cf0cab04931c3b"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75c356975f21ffb57a915641ab797bd7fb7a6a785d0d69e95b39e963a764a806"} {"level":"info","ts":"2026-07-27T20:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"debug","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a"} {"level":"info","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a"} {"level":"info","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a"} {"level":"debug","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a"} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"error","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d"} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d"} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd85995904b05a6681831f82e416cbd7a015928825fad00d73d1cf6265f75c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd85995904b05a6681831f82e416cbd7a015928825fad00d73d1cf6265f75c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd85995904b05a6681831f82e416cbd7a015928825fad00d73d1cf6265f75c66"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd85995904b05a6681831f82e416cbd7a015928825fad00d73d1cf6265f75c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd85995904b05a6681831f82e416cbd7a015928825fad00d73d1cf6265f75c66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd85995904b05a6681831f82e416cbd7a015928825fad00d73d1cf6265f75c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd85995904b05a6681831f82e416cbd7a015928825fad00d73d1cf6265f75c66"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd85995904b05a6681831f82e416cbd7a015928825fad00d73d1cf6265f75c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd85995904b05a6681831f82e416cbd7a015928825fad00d73d1cf6265f75c66"} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395ba9fd1f07022c7c9c42b11700f84e2b817956579fa3b0443481771bf65858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395ba9fd1f07022c7c9c42b11700f84e2b817956579fa3b0443481771bf65858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395ba9fd1f07022c7c9c42b11700f84e2b817956579fa3b0443481771bf65858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395ba9fd1f07022c7c9c42b11700f84e2b817956579fa3b0443481771bf65858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395ba9fd1f07022c7c9c42b11700f84e2b817956579fa3b0443481771bf65858"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02efe55ac81047ccfbaa2847f2132d4f6cacab2e54103d3905318323ace04199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02efe55ac81047ccfbaa2847f2132d4f6cacab2e54103d3905318323ace04199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"395ba9fd1f07022c7c9c42b11700f84e2b817956579fa3b0443481771bf65858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["395ba9fd1f07022c7c9c42b11700f84e2b817956579fa3b0443481771bf65858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02efe55ac81047ccfbaa2847f2132d4f6cacab2e54103d3905318323ace04199"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"395ba9fd1f07022c7c9c42b11700f84e2b817956579fa3b0443481771bf65858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02efe55ac81047ccfbaa2847f2132d4f6cacab2e54103d3905318323ace04199","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02efe55ac81047ccfbaa2847f2132d4f6cacab2e54103d3905318323ace04199"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395ba9fd1f07022c7c9c42b11700f84e2b817956579fa3b0443481771bf65858"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02efe55ac81047ccfbaa2847f2132d4f6cacab2e54103d3905318323ace04199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"395ba9fd1f07022c7c9c42b11700f84e2b817956579fa3b0443481771bf65858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02efe55ac81047ccfbaa2847f2132d4f6cacab2e54103d3905318323ace04199","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6291e2a7e86f9234d2a4214391f422dd7b92ce233670d51e07213123a48b09e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6291e2a7e86f9234d2a4214391f422dd7b92ce233670d51e07213123a48b09e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6291e2a7e86f9234d2a4214391f422dd7b92ce233670d51e07213123a48b09e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6291e2a7e86f9234d2a4214391f422dd7b92ce233670d51e07213123a48b09e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02efe55ac81047ccfbaa2847f2132d4f6cacab2e54103d3905318323ace04199"} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6291e2a7e86f9234d2a4214391f422dd7b92ce233670d51e07213123a48b09e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3f486ee1c535b57f843cabd2baf4d134836d40246a462b29d1052e665cc98a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3f486ee1c535b57f843cabd2baf4d134836d40246a462b29d1052e665cc98a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3f486ee1c535b57f843cabd2baf4d134836d40246a462b29d1052e665cc98a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/395ba9fd1f07022c7c9c42b11700f84e2b817956579fa3b0443481771bf65858"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6291e2a7e86f9234d2a4214391f422dd7b92ce233670d51e07213123a48b09e3"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf67a199e729f1070e70e9bb51d7e2f7e53eea5d750b5c90054b5b50274d6fb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3f486ee1c535b57f843cabd2baf4d134836d40246a462b29d1052e665cc98a"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf67a199e729f1070e70e9bb51d7e2f7e53eea5d750b5c90054b5b50274d6fb9"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf67a199e729f1070e70e9bb51d7e2f7e53eea5d750b5c90054b5b50274d6fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3f486ee1c535b57f843cabd2baf4d134836d40246a462b29d1052e665cc98a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa3f486ee1c535b57f843cabd2baf4d134836d40246a462b29d1052e665cc98a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3f486ee1c535b57f843cabd2baf4d134836d40246a462b29d1052e665cc98a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad4562e7ae7eaa8a8932e05edb89f9fb1131b278942a3bcb0fd3a823565fcca"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6291e2a7e86f9234d2a4214391f422dd7b92ce233670d51e07213123a48b09e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6291e2a7e86f9234d2a4214391f422dd7b92ce233670d51e07213123a48b09e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa716b7f1ef7299a3c2a3bc8f4b3469b215d76fccd9aa9ac13f4a5c7e5f75bc8"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf67a199e729f1070e70e9bb51d7e2f7e53eea5d750b5c90054b5b50274d6fb9"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6291e2a7e86f9234d2a4214391f422dd7b92ce233670d51e07213123a48b09e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d85dd785fb550fe0a2b4c4ccbe2b89f50bf92511f7054eceb1d6ff193b0f753"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bc946cef392686bd0e3e7ff3ac34b76c54326469378c8833764d7d99f74ec9a"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3f486ee1c535b57f843cabd2baf4d134836d40246a462b29d1052e665cc98a"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6291e2a7e86f9234d2a4214391f422dd7b92ce233670d51e07213123a48b09e3"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ad4562e7ae7eaa8a8932e05edb89f9fb1131b278942a3bcb0fd3a823565fcca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ad4562e7ae7eaa8a8932e05edb89f9fb1131b278942a3bcb0fd3a823565fcca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ad4562e7ae7eaa8a8932e05edb89f9fb1131b278942a3bcb0fd3a823565fcca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa716b7f1ef7299a3c2a3bc8f4b3469b215d76fccd9aa9ac13f4a5c7e5f75bc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa716b7f1ef7299a3c2a3bc8f4b3469b215d76fccd9aa9ac13f4a5c7e5f75bc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad4562e7ae7eaa8a8932e05edb89f9fb1131b278942a3bcb0fd3a823565fcca"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa716b7f1ef7299a3c2a3bc8f4b3469b215d76fccd9aa9ac13f4a5c7e5f75bc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf67a199e729f1070e70e9bb51d7e2f7e53eea5d750b5c90054b5b50274d6fb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf67a199e729f1070e70e9bb51d7e2f7e53eea5d750b5c90054b5b50274d6fb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa716b7f1ef7299a3c2a3bc8f4b3469b215d76fccd9aa9ac13f4a5c7e5f75bc8"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf67a199e729f1070e70e9bb51d7e2f7e53eea5d750b5c90054b5b50274d6fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d85dd785fb550fe0a2b4c4ccbe2b89f50bf92511f7054eceb1d6ff193b0f753","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d85dd785fb550fe0a2b4c4ccbe2b89f50bf92511f7054eceb1d6ff193b0f753"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf67a199e729f1070e70e9bb51d7e2f7e53eea5d750b5c90054b5b50274d6fb9"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d85dd785fb550fe0a2b4c4ccbe2b89f50bf92511f7054eceb1d6ff193b0f753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bc946cef392686bd0e3e7ff3ac34b76c54326469378c8833764d7d99f74ec9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bc946cef392686bd0e3e7ff3ac34b76c54326469378c8833764d7d99f74ec9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d85dd785fb550fe0a2b4c4ccbe2b89f50bf92511f7054eceb1d6ff193b0f753"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bc946cef392686bd0e3e7ff3ac34b76c54326469378c8833764d7d99f74ec9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bc946cef392686bd0e3e7ff3ac34b76c54326469378c8833764d7d99f74ec9a"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3f486ee1c535b57f843cabd2baf4d134836d40246a462b29d1052e665cc98a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6291e2a7e86f9234d2a4214391f422dd7b92ce233670d51e07213123a48b09e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad4562e7ae7eaa8a8932e05edb89f9fb1131b278942a3bcb0fd3a823565fcca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa716b7f1ef7299a3c2a3bc8f4b3469b215d76fccd9aa9ac13f4a5c7e5f75bc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf67a199e729f1070e70e9bb51d7e2f7e53eea5d750b5c90054b5b50274d6fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d85dd785fb550fe0a2b4c4ccbe2b89f50bf92511f7054eceb1d6ff193b0f753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bc946cef392686bd0e3e7ff3ac34b76c54326469378c8833764d7d99f74ec9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"} {"level":"debug","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"} {"level":"debug","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"} {"level":"debug","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"} {"level":"debug","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"} {"level":"debug","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"} {"level":"info","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55120","PortSpecifier":{"PortValue":55120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55120","PortSpecifier":{"PortValue":55120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185697,"nanos":269812828},"http":{"id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3129a3d1-f4c3-47ca-84e9-289a931551fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58900","PortSpecifier":{"PortValue":58900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:58900","PortSpecifier":{"PortValue":58900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185697,"nanos":315987048},"http":{"id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","method":"POST","headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21ded0/rate-test-model-21ded0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fedd46d4-29de-4e0d-9095-edab166cd8a1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55126","PortSpecifier":{"PortValue":55126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"504c6358-c17f-4b26-96c0-b1ea099da872","method":"POST","path":"/ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5/v1/completions","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55126","PortSpecifier":{"PortValue":55126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185697,"nanos":356390605},"http":{"id":"504c6358-c17f-4b26-96c0-b1ea099da872","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RZGp2matmgaXt0Jy_cTKsj6gxkqVbxPnhoyGvYGIljdY3poQieoGSAEGBpJK"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RZGp2matmgaXt0Jy_cTKsj6gxkqVbxPnhoyGvYGIljdY3poQieoGSAEGBpJK\"}"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b1cfd61f-67e8-4b80-851d-7dcdb3442c51","keyName":"e2e-rate-a-75432b","subscription":"e2e-rate-iso-a-75432b","tenant":"e2e-shared-a-4af3f5","userId":"b1cfd61f-67e8-4b80-851d-7dcdb3442c51","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\",\"requestedSubscription\":\"e2e-rate-iso-a-75432b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m","name":"rate-test-model-4af3f5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75432b","namespace":"ai-tenant-e2e-shared-a-4af3f5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5"}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-75432b"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b1cfd61f-67e8-4b80-851d-7dcdb3442c51","keyName":"e2e-rate-a-75432b","selected_subscription":"e2e-rate-iso-a-75432b","selected_subscription_key":"ai-tenant-e2e-shared-a-4af3f5/e2e-rate-iso-a-75432b@ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m","name":"rate-test-model-4af3f5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75432b","namespace":"ai-tenant-e2e-shared-a-4af3f5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:54:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"504c6358-c17f-4b26-96c0-b1ea099da872","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cffc2824-c654-4632-acae-136216462371","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55134","PortSpecifier":{"PortValue":55134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cffc2824-c654-4632-acae-136216462371","method":"POST","path":"/ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5/v1/completions","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cffc2824-c654-4632-acae-136216462371","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55134","PortSpecifier":{"PortValue":55134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185698,"nanos":448921831},"http":{"id":"cffc2824-c654-4632-acae-136216462371","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cffc2824-c654-4632-acae-136216462371","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RZGp2matmgaXt0Jy_cTKsj6gxkqVbxPnhoyGvYGIljdY3poQieoGSAEGBpJK"} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cffc2824-c654-4632-acae-136216462371","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RZGp2matmgaXt0Jy_cTKsj6gxkqVbxPnhoyGvYGIljdY3poQieoGSAEGBpJK\"}"} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cffc2824-c654-4632-acae-136216462371","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b1cfd61f-67e8-4b80-851d-7dcdb3442c51","keyName":"e2e-rate-a-75432b","subscription":"e2e-rate-iso-a-75432b","tenant":"e2e-shared-a-4af3f5","userId":"b1cfd61f-67e8-4b80-851d-7dcdb3442c51","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cffc2824-c654-4632-acae-136216462371","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\",\"requestedSubscription\":\"e2e-rate-iso-a-75432b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cffc2824-c654-4632-acae-136216462371","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m","name":"rate-test-model-4af3f5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75432b","namespace":"ai-tenant-e2e-shared-a-4af3f5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5"}} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cffc2824-c654-4632-acae-136216462371","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cffc2824-c654-4632-acae-136216462371","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cffc2824-c654-4632-acae-136216462371","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cffc2824-c654-4632-acae-136216462371","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cffc2824-c654-4632-acae-136216462371","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cffc2824-c654-4632-acae-136216462371","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cffc2824-c654-4632-acae-136216462371","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-75432b"} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cffc2824-c654-4632-acae-136216462371","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cffc2824-c654-4632-acae-136216462371","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b1cfd61f-67e8-4b80-851d-7dcdb3442c51","keyName":"e2e-rate-a-75432b","selected_subscription":"e2e-rate-iso-a-75432b","selected_subscription_key":"ai-tenant-e2e-shared-a-4af3f5/e2e-rate-iso-a-75432b@ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m","name":"rate-test-model-4af3f5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75432b","namespace":"ai-tenant-e2e-shared-a-4af3f5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cffc2824-c654-4632-acae-136216462371","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cffc2824-c654-4632-acae-136216462371","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33368","PortSpecifier":{"PortValue":33368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54d73fae-cbed-48cb-9461-857b4410e3a6","method":"POST","path":"/ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5/v1/completions","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33368","PortSpecifier":{"PortValue":33368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185699,"nanos":502031315},"http":{"id":"54d73fae-cbed-48cb-9461-857b4410e3a6","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RZGp2matmgaXt0Jy_cTKsj6gxkqVbxPnhoyGvYGIljdY3poQieoGSAEGBpJK"} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RZGp2matmgaXt0Jy_cTKsj6gxkqVbxPnhoyGvYGIljdY3poQieoGSAEGBpJK\"}"} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b1cfd61f-67e8-4b80-851d-7dcdb3442c51","keyName":"e2e-rate-a-75432b","subscription":"e2e-rate-iso-a-75432b","tenant":"e2e-shared-a-4af3f5","userId":"b1cfd61f-67e8-4b80-851d-7dcdb3442c51","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\",\"requestedSubscription\":\"e2e-rate-iso-a-75432b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m","name":"rate-test-model-4af3f5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75432b","namespace":"ai-tenant-e2e-shared-a-4af3f5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5"}} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-75432b"} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b1cfd61f-67e8-4b80-851d-7dcdb3442c51","keyName":"e2e-rate-a-75432b","selected_subscription":"e2e-rate-iso-a-75432b","selected_subscription_key":"ai-tenant-e2e-shared-a-4af3f5/e2e-rate-iso-a-75432b@ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m","name":"rate-test-model-4af3f5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75432b","namespace":"ai-tenant-e2e-shared-a-4af3f5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:54:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54d73fae-cbed-48cb-9461-857b4410e3a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39770","PortSpecifier":{"PortValue":39770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e096d6e-d830-4107-b098-85f13a641e7c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39770","PortSpecifier":{"PortValue":39770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185717,"nanos":808123686},"http":{"id":"9e096d6e-d830-4107-b098-85f13a641e7c","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e096d6e-d830-4107-b098-85f13a641e7c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01befc53-56fc-45f7-9449-6df13453d33f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40090","PortSpecifier":{"PortValue":40090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01befc53-56fc-45f7-9449-6df13453d33f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01befc53-56fc-45f7-9449-6df13453d33f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40090","PortSpecifier":{"PortValue":40090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185717,"nanos":849846851},"http":{"id":"01befc53-56fc-45f7-9449-6df13453d33f","method":"POST","headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01befc53-56fc-45f7-9449-6df13453d33f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01befc53-56fc-45f7-9449-6df13453d33f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01befc53-56fc-45f7-9449-6df13453d33f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01befc53-56fc-45f7-9449-6df13453d33f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01befc53-56fc-45f7-9449-6df13453d33f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01befc53-56fc-45f7-9449-6df13453d33f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21ded0/rate-test-model-21ded0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01befc53-56fc-45f7-9449-6df13453d33f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01befc53-56fc-45f7-9449-6df13453d33f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01befc53-56fc-45f7-9449-6df13453d33f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01befc53-56fc-45f7-9449-6df13453d33f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01befc53-56fc-45f7-9449-6df13453d33f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39780","PortSpecifier":{"PortValue":39780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","method":"POST","path":"/ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5/v1/completions","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39780","PortSpecifier":{"PortValue":39780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185717,"nanos":887653180},"http":{"id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hXhPumjQs8eEjbZE_cUOiRobyJoSykJLSm0XVgHXHD4iGAxW6LzIoqifgElT"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hXhPumjQs8eEjbZE_cUOiRobyJoSykJLSm0XVgHXHD4iGAxW6LzIoqifgElT\"}"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b8e6443-95c5-470c-915d-f920feb0f602","keyName":"e2e-rate-a-8a639b","subscription":"e2e-rate-iso-a-8a639b","tenant":"e2e-shared-a-4af3f5","userId":"1b8e6443-95c5-470c-915d-f920feb0f602","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\",\"requestedSubscription\":\"e2e-rate-iso-a-8a639b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m","name":"rate-test-model-4af3f5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a639b","namespace":"ai-tenant-e2e-shared-a-4af3f5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5"}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a639b"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b8e6443-95c5-470c-915d-f920feb0f602","keyName":"e2e-rate-a-8a639b","selected_subscription":"e2e-rate-iso-a-8a639b","selected_subscription_key":"ai-tenant-e2e-shared-a-4af3f5/e2e-rate-iso-a-8a639b@ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m","name":"rate-test-model-4af3f5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a639b","namespace":"ai-tenant-e2e-shared-a-4af3f5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fded60e4-6b6f-440c-8a7a-8d80fcdee93f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39784","PortSpecifier":{"PortValue":39784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d745ed4-1f30-48cf-847f-3064477490bb","method":"POST","path":"/ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5/v1/completions","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39784","PortSpecifier":{"PortValue":39784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185718,"nanos":930042090},"http":{"id":"5d745ed4-1f30-48cf-847f-3064477490bb","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hXhPumjQs8eEjbZE_cUOiRobyJoSykJLSm0XVgHXHD4iGAxW6LzIoqifgElT"} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hXhPumjQs8eEjbZE_cUOiRobyJoSykJLSm0XVgHXHD4iGAxW6LzIoqifgElT\"}"} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b8e6443-95c5-470c-915d-f920feb0f602","keyName":"e2e-rate-a-8a639b","subscription":"e2e-rate-iso-a-8a639b","tenant":"e2e-shared-a-4af3f5","userId":"1b8e6443-95c5-470c-915d-f920feb0f602","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\",\"requestedSubscription\":\"e2e-rate-iso-a-8a639b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m","name":"rate-test-model-4af3f5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a639b","namespace":"ai-tenant-e2e-shared-a-4af3f5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5"}} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a639b"} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b8e6443-95c5-470c-915d-f920feb0f602","keyName":"e2e-rate-a-8a639b","selected_subscription":"e2e-rate-iso-a-8a639b","selected_subscription_key":"ai-tenant-e2e-shared-a-4af3f5/e2e-rate-iso-a-8a639b@ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m","name":"rate-test-model-4af3f5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a639b","namespace":"ai-tenant-e2e-shared-a-4af3f5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:55:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d745ed4-1f30-48cf-847f-3064477490bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:53436","PortSpecifier":{"PortValue":53436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","method":"POST","path":"/ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5/v1/completions","host":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:53436","PortSpecifier":{"PortValue":53436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185719,"nanos":971529262},"http":{"id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","method":"POST","headers":{":authority":"e2e-shared-a-4af3f5.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hXhPumjQs8eEjbZE_cUOiRobyJoSykJLSm0XVgHXHD4iGAxW6LzIoqifgElT"} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hXhPumjQs8eEjbZE_cUOiRobyJoSykJLSm0XVgHXHD4iGAxW6LzIoqifgElT\"}"} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b8e6443-95c5-470c-915d-f920feb0f602","keyName":"e2e-rate-a-8a639b","subscription":"e2e-rate-iso-a-8a639b","tenant":"e2e-shared-a-4af3f5","userId":"1b8e6443-95c5-470c-915d-f920feb0f602","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\",\"requestedSubscription\":\"e2e-rate-iso-a-8a639b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4af3f5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m","name":"rate-test-model-4af3f5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a639b","namespace":"ai-tenant-e2e-shared-a-4af3f5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5"}} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a639b"} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b8e6443-95c5-470c-915d-f920feb0f602","keyName":"e2e-rate-a-8a639b","selected_subscription":"e2e-rate-iso-a-8a639b","selected_subscription_key":"ai-tenant-e2e-shared-a-4af3f5/e2e-rate-iso-a-8a639b@ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4af3f5/models/facebook/opt-125m","name":"rate-test-model-4af3f5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a639b","namespace":"ai-tenant-e2e-shared-a-4af3f5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4af3f5/rate-test-model-4af3f5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7bc64e2-09ab-4cd8-8d49-55f9382ab743","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41150","PortSpecifier":{"PortValue":41150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ed605fc-6c05-486e-bf07-e56fbc976133","method":"POST","path":"/ai-tenant-e2e-shared-b-21ded0/rate-test-model-21ded0/v1/completions","host":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41150","PortSpecifier":{"PortValue":41150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185720,"nanos":10440903},"http":{"id":"6ed605fc-6c05-486e-bf07-e56fbc976133","method":"POST","headers":{":authority":"e2e-shared-b-21ded0.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-21ded0/rate-test-model-21ded0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CNvuNHQR1iss1tMI_b4bM6UwDpuzdOf8wvKpcaaY86xI6wl6z5HUoohvWkak"} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-21ded0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CNvuNHQR1iss1tMI_b4bM6UwDpuzdOf8wvKpcaaY86xI6wl6z5HUoohvWkak\"}"} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21ded0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d91ca383-26f7-43d1-8558-3d2022509003","keyName":"e2e-rate-b-8a639b","subscription":"e2e-rate-iso-b-8a639b","tenant":"e2e-shared-b-21ded0","userId":"d91ca383-26f7-43d1-8558-3d2022509003","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-21ded0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-21ded0/rate-test-model-21ded0\",\"requestedSubscription\":\"e2e-rate-iso-b-8a639b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21ded0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m","name":"rate-test-model-21ded0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8a639b","namespace":"ai-tenant-e2e-shared-b-21ded0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-21ded0/rate-test-model-21ded0"}} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21ded0/rate-test-model-21ded0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8a639b"} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d91ca383-26f7-43d1-8558-3d2022509003","keyName":"e2e-rate-b-8a639b","selected_subscription":"e2e-rate-iso-b-8a639b","selected_subscription_key":"ai-tenant-e2e-shared-b-21ded0/e2e-rate-iso-b-8a639b@ai-tenant-e2e-shared-b-21ded0/rate-test-model-21ded0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-21ded0/models/facebook/opt-125m","name":"rate-test-model-21ded0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8a639b","namespace":"ai-tenant-e2e-shared-b-21ded0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-21ded0/rate-test-model-21ded0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:55:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ed605fc-6c05-486e-bf07-e56fbc976133","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6233da4841d628da18befb3ef821e438a588c6cece7869de7f2b7785f56ea406"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf924d257ff11d11781eed0560a538bd2a19ce3c6962a80c8507a289ff7a5f33"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b6a9b625916b248f8c23e6191bb9c31db2ce6251b580aae6ec7c9dcfdcb705a"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d85dd785fb550fe0a2b4c4ccbe2b89f50bf92511f7054eceb1d6ff193b0f753"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b181ad939a8e5645f8921fe086236031054da630ac068ec704e994320244cfc2"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ad4562e7ae7eaa8a8932e05edb89f9fb1131b278942a3bcb0fd3a823565fcca"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b4c61fb8189daafbfa408e98f32238c115b332703bb5a234480ceb89e3b305a"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c241b89957d02017d9b99d27c5231a5b60ff9f9be18424f3ce0df9096ca5586d"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bc946cef392686bd0e3e7ff3ac34b76c54326469378c8833764d7d99f74ec9a"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e528f5c9763d2551f8e0c30d6258c447ba4dc87e622b3ae3392e522b50bad99"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ca7093ebd206c437e7ded6a6bea0f6ab59240dd5f2cb54914777f82c7b46dc4"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bc8b0a7dbc78844d41ac1d13d1136ffcb25829b6168cf6003dae84350a996cc"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa716b7f1ef7299a3c2a3bc8f4b3469b215d76fccd9aa9ac13f4a5c7e5f75bc8"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6291e2a7e86f9234d2a4214391f422dd7b92ce233670d51e07213123a48b09e3"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/506f991fae9ae94e593fae50c5ef191c8af656b6bf95f549a505973da4658478"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf67a199e729f1070e70e9bb51d7e2f7e53eea5d750b5c90054b5b50274d6fb9"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c320fe03db1ccc21b8de3f0bc163fdc5dfc403f1d0f38912dfb51a46df3ab11e"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd85995904b05a6681831f82e416cbd7a015928825fad00d73d1cf6265f75c66"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02efe55ac81047ccfbaa2847f2132d4f6cacab2e54103d3905318323ace04199"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/395ba9fd1f07022c7c9c42b11700f84e2b817956579fa3b0443481771bf65858"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17e4ef389e7d40115de5c7867b1bd947c99217b49c4efdb43cf8e2baa0e9d7f8"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e003b8315a7d23128c9b5c58f4da9034de6f30f78dd2ec7b0d6a318964975ad6"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82201e2e961906a30f8091e3d47ee7ce8a65dfa240a2bf570f8db19187802490"} {"level":"info","ts":"2026-07-27T20:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa3f486ee1c535b57f843cabd2baf4d134836d40246a462b29d1052e665cc98a"} {"level":"info","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39530","PortSpecifier":{"PortValue":39530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39530","PortSpecifier":{"PortValue":39530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185783,"nanos":244512497},"http":{"id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","method":"POST","headers":{":authority":"maas.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c8e4a61-075c-47b2-af2e-e0169d60c095","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39534","PortSpecifier":{"PortValue":39534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39534","PortSpecifier":{"PortValue":39534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185783,"nanos":302456908},"http":{"id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","method":"POST","headers":{":authority":"maas.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-agriAAMqMYUQr11Z_wTsuLTrWyn6ip7BlfFRw4bKd0qTs94HgSjNQtmhwR7G"} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-agriAAMqMYUQr11Z_wTsuLTrWyn6ip7BlfFRw4bKd0qTs94HgSjNQtmhwR7G\"}"} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ca8878b6-cd35-46c4-a22e-4652b34ced06","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"ca8878b6-cd35-46c4-a22e-4652b34ced06","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ca8878b6-cd35-46c4-a22e-4652b34ced06","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5e664fb-1b61-453a-ab08-d0f70dcb94c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717"} {"level":"error","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030"} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2"} {"level":"debug","ts":"2026-07-27T20:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2"} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2"} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761"} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761"} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce80ed08240e4bb772f13f48fbd5f1866cb1aba57d3b1d3d72d04f666c7a972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce80ed08240e4bb772f13f48fbd5f1866cb1aba57d3b1d3d72d04f666c7a972","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce80ed08240e4bb772f13f48fbd5f1866cb1aba57d3b1d3d72d04f666c7a972","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce80ed08240e4bb772f13f48fbd5f1866cb1aba57d3b1d3d72d04f666c7a972"} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce80ed08240e4bb772f13f48fbd5f1866cb1aba57d3b1d3d72d04f666c7a972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce80ed08240e4bb772f13f48fbd5f1866cb1aba57d3b1d3d72d04f666c7a972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce80ed08240e4bb772f13f48fbd5f1866cb1aba57d3b1d3d72d04f666c7a972","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce80ed08240e4bb772f13f48fbd5f1866cb1aba57d3b1d3d72d04f666c7a972","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce80ed08240e4bb772f13f48fbd5f1866cb1aba57d3b1d3d72d04f666c7a972"} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T20:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T20:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"} {"level":"info","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44260","PortSpecifier":{"PortValue":44260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-366a10.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44260","PortSpecifier":{"PortValue":44260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185833,"nanos":418125116},"http":{"id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","method":"POST","headers":{":authority":"e2e-ipp-a-366a10.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d772c4-5fac-4686-bc33-56d1a767516f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"]}} {"level":"debug","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bca7dfdf0a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8669fa97-e593-41cc-b885-0f6f4ec6b8e7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d772c4-5fac-4686-bc33-56d1a767516f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-366a10.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-366a10/ipp-route-366a10\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-366a10/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:57:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"023252ad-4b6b-41b8-9cc2-b1c957fb07c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44262","PortSpecifier":{"PortValue":44262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","method":"POST","path":"/ai-tenant-e2e-ipp-a-366a10/ipp-route-366a10/v1/chat/completions","host":"e2e-ipp-a-366a10.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44262","PortSpecifier":{"PortValue":44262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785185835,"nanos":485107176},"http":{"id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","method":"POST","headers":{":authority":"e2e-ipp-a-366a10.apps.20c5f773-f163-4393-97c6-2bca7dfdf0a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-366a10/ipp-route-366a10/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AYakyGoLoeLekfo5_fpG59vQ8Wqaz28Jkvhvl25S5x2qYrojZgO1CNwGgdk3"} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-366a10.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AYakyGoLoeLekfo5_fpG59vQ8Wqaz28Jkvhvl25S5x2qYrojZgO1CNwGgdk3\"}"} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-366a10.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b3c5b4ec-8069-4612-8634-cdedb31ceeb4","keyName":"e2e-ipp-366a10","subscription":"ipp-route-366a10-sub","tenant":"e2e-ipp-a-366a10","userId":"b3c5b4ec-8069-4612-8634-cdedb31ceeb4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-366a10.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-366a10/ipp-route-366a10\",\"requestedSubscription\":\"ipp-route-366a10-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-366a10.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-366a10/models/facebook/opt-125m","name":"ipp-route-366a10","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-366a10-sub","namespace":"ai-tenant-e2e-ipp-a-366a10","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-366a10/ipp-route-366a10"}} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-366a10/ipp-route-366a10\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-366a10/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-366a10-sub"} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b3c5b4ec-8069-4612-8634-cdedb31ceeb4","keyName":"e2e-ipp-366a10","selected_subscription":"ipp-route-366a10-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-366a10/ipp-route-366a10-sub@ai-tenant-e2e-ipp-a-366a10/ipp-route-366a10","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-366a10/models/facebook/opt-125m","name":"ipp-route-366a10","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-366a10-sub","namespace":"ai-tenant-e2e-ipp-a-366a10","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-366a10/ipp-route-366a10"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T20:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa8197db-d961-4d7b-b0cd-d25d0966cee1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T20:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bff7513d646f774f4bb2ad42324b77e602c1ce4aa421e771ee114e7a477abe2"} {"level":"info","ts":"2026-07-27T20:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cd553e5aab3c355b414cbeb75f3faa9bbb0ded2d9b239b6d75ae99007e4e38f"} {"level":"info","ts":"2026-07-27T20:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16f94acd1d3b7c9fad1ae12750b0a5fa642685c6b7a44b40fc1ae8281dbbd851"} {"level":"info","ts":"2026-07-27T20:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e70fcba1ebb73403d875673606c30762c26d3d60fbf4efb1ff9deea3cf090e09"} {"level":"info","ts":"2026-07-27T20:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc4cb2614dbcf0e850a458355138fcca2b81809c95c98d5793aa96194c9c9717"} {"level":"info","ts":"2026-07-27T20:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe2f3e1e9d95c2ebea745e59cda569a5ae5ddec301294eb36e1495f67327ad18"} {"level":"info","ts":"2026-07-27T20:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ce80ed08240e4bb772f13f48fbd5f1866cb1aba57d3b1d3d72d04f666c7a972"} {"level":"info","ts":"2026-07-27T20:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d53c327e618aa48438dcdb4203ebc7efdead68dc76309f51c81bad45fc0cd5f0"} {"level":"info","ts":"2026-07-27T20:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b08688a0cdaa811d18e574aa80b75814df80e339d709d3a2ff222508b4f28761"} {"level":"info","ts":"2026-07-27T20:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/335e74072b592f3181a9bd966c5781806d158116785b709c6802c193a6b4dcd5"} {"level":"info","ts":"2026-07-27T20:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39ec610c2d14a3ccc140d872bfa3322279edf100a290911500bf65c299e8c030"} {"level":"info","ts":"2026-07-27T20:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/681f8431b7c28c4ad895afbe057cdbfc4d424c3813ee2f9f41d05642142a84cc"}