--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f3e310931a7ce23c97a0b6cc7cf356dab4034fe9fd1e16ed9cc5db7956483c"} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f3e310931a7ce23c97a0b6cc7cf356dab4034fe9fd1e16ed9cc5db7956483c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f3e310931a7ce23c97a0b6cc7cf356dab4034fe9fd1e16ed9cc5db7956483c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63f3e310931a7ce23c97a0b6cc7cf356dab4034fe9fd1e16ed9cc5db7956483c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f3e310931a7ce23c97a0b6cc7cf356dab4034fe9fd1e16ed9cc5db7956483c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f3e310931a7ce23c97a0b6cc7cf356dab4034fe9fd1e16ed9cc5db7956483c"} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f3e310931a7ce23c97a0b6cc7cf356dab4034fe9fd1e16ed9cc5db7956483c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f3e310931a7ce23c97a0b6cc7cf356dab4034fe9fd1e16ed9cc5db7956483c"} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:18:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"debug","ts":"2026-07-06T18:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"debug","ts":"2026-07-06T18:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:18:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:18:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:18:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/935dde4071294b32401c1079b6c8c26a9dd0d627aec942d2b664c5b98a1b9e58"} {"level":"info","ts":"2026-07-06T18:18:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2f01951d85b8226c9bbedcdbf53e1dad47ea21b471d5c07ccb4d0f6bc13a02c"} {"level":"info","ts":"2026-07-06T18:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61d6a36e0afa1a77911ee739688f0c480ab1fcb444f55ca0ef07df3a618caf8a"} {"level":"info","ts":"2026-07-06T18:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63f3e310931a7ce23c97a0b6cc7cf356dab4034fe9fd1e16ed9cc5db7956483c"} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae"} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54"} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54"} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510"} {"level":"error","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10f89ff6029bd6fe8b57274173cc69f72a7df5a826177fe2385b16c67cde58c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10f89ff6029bd6fe8b57274173cc69f72a7df5a826177fe2385b16c67cde58c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10f89ff6029bd6fe8b57274173cc69f72a7df5a826177fe2385b16c67cde58c2"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10f89ff6029bd6fe8b57274173cc69f72a7df5a826177fe2385b16c67cde58c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10f89ff6029bd6fe8b57274173cc69f72a7df5a826177fe2385b16c67cde58c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10f89ff6029bd6fe8b57274173cc69f72a7df5a826177fe2385b16c67cde58c2"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10f89ff6029bd6fe8b57274173cc69f72a7df5a826177fe2385b16c67cde58c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9fd4e2fac62916c97dd00b5d8db2f43495774d626e858cee8cd34757aebbea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9fd4e2fac62916c97dd00b5d8db2f43495774d626e858cee8cd34757aebbea1"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9fd4e2fac62916c97dd00b5d8db2f43495774d626e858cee8cd34757aebbea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92de65da02079672a37ea2c989e796408bd593ede2e5bf3446dff208c609afa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92de65da02079672a37ea2c989e796408bd593ede2e5bf3446dff208c609afa1"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10f89ff6029bd6fe8b57274173cc69f72a7df5a826177fe2385b16c67cde58c2"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92de65da02079672a37ea2c989e796408bd593ede2e5bf3446dff208c609afa1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10f89ff6029bd6fe8b57274173cc69f72a7df5a826177fe2385b16c67cde58c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9fd4e2fac62916c97dd00b5d8db2f43495774d626e858cee8cd34757aebbea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9fd4e2fac62916c97dd00b5d8db2f43495774d626e858cee8cd34757aebbea1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9fd4e2fac62916c97dd00b5d8db2f43495774d626e858cee8cd34757aebbea1"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9fd4e2fac62916c97dd00b5d8db2f43495774d626e858cee8cd34757aebbea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92de65da02079672a37ea2c989e796408bd593ede2e5bf3446dff208c609afa1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92de65da02079672a37ea2c989e796408bd593ede2e5bf3446dff208c609afa1"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9fd4e2fac62916c97dd00b5d8db2f43495774d626e858cee8cd34757aebbea1"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9fd4e2fac62916c97dd00b5d8db2f43495774d626e858cee8cd34757aebbea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92de65da02079672a37ea2c989e796408bd593ede2e5bf3446dff208c609afa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:19:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92de65da02079672a37ea2c989e796408bd593ede2e5bf3446dff208c609afa1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510"} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92de65da02079672a37ea2c989e796408bd593ede2e5bf3446dff208c609afa1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92de65da02079672a37ea2c989e796408bd593ede2e5bf3446dff208c609afa1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:19:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92de65da02079672a37ea2c989e796408bd593ede2e5bf3446dff208c609afa1"} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"info","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"info","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"info","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904"} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904"} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8"} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca"} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca"} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea"} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"} {"level":"info","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41496","PortSpecifier":{"PortValue":41496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41496","PortSpecifier":{"PortValue":41496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362005,"nanos":189938560},"http":{"id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/auth-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd9bef95-e49a-49c5-b9d1-f7f3b3d10360","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96b62b70-40fb-460a-a557-775d983d6e37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36480","PortSpecifier":{"PortValue":36480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96b62b70-40fb-460a-a557-775d983d6e37","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96b62b70-40fb-460a-a557-775d983d6e37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36480","PortSpecifier":{"PortValue":36480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362005,"nanos":267283545},"http":{"id":"96b62b70-40fb-460a-a557-775d983d6e37","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96b62b70-40fb-460a-a557-775d983d6e37","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96b62b70-40fb-460a-a557-775d983d6e37","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96b62b70-40fb-460a-a557-775d983d6e37","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96b62b70-40fb-460a-a557-775d983d6e37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96b62b70-40fb-460a-a557-775d983d6e37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96b62b70-40fb-460a-a557-775d983d6e37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/auth-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96b62b70-40fb-460a-a557-775d983d6e37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96b62b70-40fb-460a-a557-775d983d6e37","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96b62b70-40fb-460a-a557-775d983d6e37","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96b62b70-40fb-460a-a557-775d983d6e37","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96b62b70-40fb-460a-a557-775d983d6e37","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62321e33-2067-4679-a439-3874c3740726","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41498","PortSpecifier":{"PortValue":41498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62321e33-2067-4679-a439-3874c3740726","method":"GET","path":"/maas-api/v1/api-keys/25d8154e-834b-4a1e-9aa5-01deb4b34b8d","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62321e33-2067-4679-a439-3874c3740726","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41498","PortSpecifier":{"PortValue":41498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362005,"nanos":355183018},"http":{"id":"62321e33-2067-4679-a439-3874c3740726","method":"GET","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/25d8154e-834b-4a1e-9aa5-01deb4b34b8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"62321e33-2067-4679-a439-3874c3740726","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62321e33-2067-4679-a439-3874c3740726","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62321e33-2067-4679-a439-3874c3740726","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/25d8154e-834b-4a1e-9aa5-01deb4b34b8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62321e33-2067-4679-a439-3874c3740726","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62321e33-2067-4679-a439-3874c3740726","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62321e33-2067-4679-a439-3874c3740726","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/auth-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"62321e33-2067-4679-a439-3874c3740726","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62321e33-2067-4679-a439-3874c3740726","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62321e33-2067-4679-a439-3874c3740726","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62321e33-2067-4679-a439-3874c3740726","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62321e33-2067-4679-a439-3874c3740726","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36486","PortSpecifier":{"PortValue":36486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","method":"GET","path":"/maas-api/v1/api-keys/0e61b40a-6973-44e7-94d9-58a8df0ebad3","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36486","PortSpecifier":{"PortValue":36486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362005,"nanos":395814037},"http":{"id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","method":"GET","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0e61b40a-6973-44e7-94d9-58a8df0ebad3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0e61b40a-6973-44e7-94d9-58a8df0ebad3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/auth-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebc2ef2f-af59-48e8-bf6e-dce8f28c04f4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39902","PortSpecifier":{"PortValue":39902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39902","PortSpecifier":{"PortValue":39902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362024,"nanos":596508490},"http":{"id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/auth-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a938d478-c72f-4b74-9b41-dfdbbdcae185","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50022","PortSpecifier":{"PortValue":50022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50022","PortSpecifier":{"PortValue":50022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362024,"nanos":634270034},"http":{"id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/auth-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60c6bd9a-fa73-490b-a461-8118a0f64f74","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39916","PortSpecifier":{"PortValue":39916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f87806fe-344a-4015-a99c-f0d56398e3ad","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39916","PortSpecifier":{"PortValue":39916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362024,"nanos":672548200},"http":{"id":"f87806fe-344a-4015-a99c-f0d56398e3ad","method":"GET","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9kWDcPw0oCvvpl1q_4EJyWdWPMikRYqPoPde2HQH9wc35bWq9SVT8tW4hpEe"} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9kWDcPw0oCvvpl1q_4EJyWdWPMikRYqPoPde2HQH9wc35bWq9SVT8tW4hpEe\"}"} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9343325d-d414-40e2-b66d-b508acc1cf26","keyName":"e2e-auth-iso-a-3b212a","subscription":"e2e-auth-iso-a9182e","tenant":"e2e-shared-a-91cb9f","userId":"9343325d-d414-40e2-b66d-b508acc1cf26","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/auth-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a9182e"} {"level":"info","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f87806fe-344a-4015-a99c-f0d56398e3ad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37214","PortSpecifier":{"PortValue":37214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37214","PortSpecifier":{"PortValue":37214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362041,"nanos":781342323},"http":{"id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/auth-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2c35392-6e32-41fe-8033-032b0a2e5b9a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41608","PortSpecifier":{"PortValue":41608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41608","PortSpecifier":{"PortValue":41608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362041,"nanos":827257182},"http":{"id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/auth-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9f28984-f178-4396-92e7-f1fd7fa41cef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd86edb7-4b88-4b11-93e6-0769e7a3d595","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41614","PortSpecifier":{"PortValue":41614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd86edb7-4b88-4b11-93e6-0769e7a3d595","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd86edb7-4b88-4b11-93e6-0769e7a3d595","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41614","PortSpecifier":{"PortValue":41614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362041,"nanos":864525356},"http":{"id":"fd86edb7-4b88-4b11-93e6-0769e7a3d595","method":"GET","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd86edb7-4b88-4b11-93e6-0769e7a3d595","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xVKwHT9nCNOJGMp1_dDEVyH7fOWKEGsB8yzUP2SbtdsaU900dT6ZXuVPTK6Z"} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd86edb7-4b88-4b11-93e6-0769e7a3d595","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2861c1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xVKwHT9nCNOJGMp1_dDEVyH7fOWKEGsB8yzUP2SbtdsaU900dT6ZXuVPTK6Z\"}"} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd86edb7-4b88-4b11-93e6-0769e7a3d595","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2861c1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd86edb7-4b88-4b11-93e6-0769e7a3d595","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd86edb7-4b88-4b11-93e6-0769e7a3d595","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"fd86edb7-4b88-4b11-93e6-0769e7a3d595","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd86edb7-4b88-4b11-93e6-0769e7a3d595","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-06T18:20:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd86edb7-4b88-4b11-93e6-0769e7a3d595","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34046","PortSpecifier":{"PortValue":34046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34046","PortSpecifier":{"PortValue":34046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362058,"nanos":936546919},"http":{"id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/auth-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64dc7f64-3dec-4c3a-84db-7b5bfc66fe0e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38582","PortSpecifier":{"PortValue":38582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38582","PortSpecifier":{"PortValue":38582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362058,"nanos":977640754},"http":{"id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/auth-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99161152-d86a-40ee-a6b4-4c9b58bc226c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34060","PortSpecifier":{"PortValue":34060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34060","PortSpecifier":{"PortValue":34060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362059,"nanos":42900924},"http":{"id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/auth-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b4e6cf4-4e37-4a32-8a26-2db7c435a5f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38588","PortSpecifier":{"PortValue":38588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38588","PortSpecifier":{"PortValue":38588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362059,"nanos":82896470},"http":{"id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/auth-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0532a8c-f6cd-413b-9319-2bd8226dc398","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42950","PortSpecifier":{"PortValue":42950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42950","PortSpecifier":{"PortValue":42950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362074,"nanos":48071409},"http":{"id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/auth-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fceb90d5-7e62-43ef-96d2-79db423ec33f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33616","PortSpecifier":{"PortValue":33616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35d8f1a2-4479-9bb9-8922-41128187197e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33616","PortSpecifier":{"PortValue":33616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362074,"nanos":89212987},"http":{"id":"35d8f1a2-4479-9bb9-8922-41128187197e","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/auth-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35d8f1a2-4479-9bb9-8922-41128187197e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33628","PortSpecifier":{"PortValue":33628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96b99914-49d4-465e-8f85-cdff3f10c796","method":"GET","path":"/maas-api/v1/api-keys/d582e115-5e94-46dd-9e0a-637d88a941f0","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33628","PortSpecifier":{"PortValue":33628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362074,"nanos":130887790},"http":{"id":"96b99914-49d4-465e-8f85-cdff3f10c796","method":"GET","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d582e115-5e94-46dd-9e0a-637d88a941f0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d582e115-5e94-46dd-9e0a-637d88a941f0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/auth-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96b99914-49d4-465e-8f85-cdff3f10c796","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42956","PortSpecifier":{"PortValue":42956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","method":"GET","path":"/maas-api/v1/api-keys/d582e115-5e94-46dd-9e0a-637d88a941f0","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42956","PortSpecifier":{"PortValue":42956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362074,"nanos":171126619},"http":{"id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","method":"GET","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d582e115-5e94-46dd-9e0a-637d88a941f0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d582e115-5e94-46dd-9e0a-637d88a941f0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/auth-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ff68ebf-b2bc-4e1e-a362-f4353f89a05d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54064","PortSpecifier":{"PortValue":54064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29a7c3ca-b094-42eb-b066-743c51633a3c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54064","PortSpecifier":{"PortValue":54064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362091,"nanos":203092929},"http":{"id":"29a7c3ca-b094-42eb-b066-743c51633a3c","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/auth-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29a7c3ca-b094-42eb-b066-743c51633a3c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39664","PortSpecifier":{"PortValue":39664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"611aceff-4bd3-453e-8e64-a47bb533e562","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39664","PortSpecifier":{"PortValue":39664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362091,"nanos":241359684},"http":{"id":"611aceff-4bd3-453e-8e64-a47bb533e562","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/auth-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"611aceff-4bd3-453e-8e64-a47bb533e562","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54080","PortSpecifier":{"PortValue":54080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54080","PortSpecifier":{"PortValue":54080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362091,"nanos":287173649},"http":{"id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KwznBlpRblMI5JdL_ZV5wc9h28AVAgEZgaCFP99xrNu7QXz9Ux2aR5lgzg4M"} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KwznBlpRblMI5JdL_ZV5wc9h28AVAgEZgaCFP99xrNu7QXz9Ux2aR5lgzg4M\"}"} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3c5867f0-38b9-44f7-b904-9e20adc37104","keyName":"e2e-auth-iso-a-154fc6","subscription":"e2e-auth-iso-3e1152","tenant":"e2e-shared-a-91cb9f","userId":"3c5867f0-38b9-44f7-b904-9e20adc37104","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/auth-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3e1152"} {"level":"info","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:21:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8ac93e0-def0-425f-a1db-5f3e6a9bbeb4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaf40f35750628f3de6bed038edd72f3fc16283bf1132e1586fbb8df1bf5b5ea"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9fd4e2fac62916c97dd00b5d8db2f43495774d626e858cee8cd34757aebbea1"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b776589264b4b9cebf105bc8f15727777135df6244890b5b7f6b2f0724023904"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092f8133731c96873a949a3d4f67277a8628b70908eeace2743b8c2855814d87"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10f89ff6029bd6fe8b57274173cc69f72a7df5a826177fe2385b16c67cde58c2"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de87484da478d707dfb329bccc5d754afcfa0ebbd7eb0042d2dd9d15c0a5eca"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cd4a2e2e30594ab91a79878189734093f95c78c7acc518858701c57d2aa05a8"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62f6a6f778fdc3e5f0a8afebc08b8decbc8b3a404ab019dd0cb1bac1e773d70e"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4469586389828b0a02f2fc5ad0bedbfd0608dd77ef180af33aa7a4fb8086ccf"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6cd2ef95c129b16551fb30ff74ed62d72fe9392a2aec5a2bd4748b0c01ccf12"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d70a01380f176d2342946da9c2e3bcbd9ea7a9ee2b937901f364d0e224cd61b5"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86ff9ebe3bfaa7ce67cfa0cf91ea5f1258730880f40cd20e244ffb626a1899c8"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5c1098a66cf93f4845064509c0e6f800e3db7cae5f394b87d59765e1a188510"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58fe29db323a1f97b3c764d329e8f58fd412061f42156e604f9780096b75a4ae"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92de65da02079672a37ea2c989e796408bd593ede2e5bf3446dff208c609afa1"} {"level":"info","ts":"2026-07-06T18:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6003d3e803838d9b182a2ec666541890b6bca4cf310e70243ebed8f38f5737fe"} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab"} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab"} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab"} {"level":"debug","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:21:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:21:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:21:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:21:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b"} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693"} {"level":"error","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693"} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693"} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb"} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb"} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea"} {"level":"debug","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea"} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280"} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea"} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280"} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea"} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e"} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf"} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280"} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea"} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e"} {"level":"info","ts":"2026-07-06T18:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf"} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280"} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e"} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b"} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b"} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:22:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b"} {"level":"info","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"debug","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"} {"level":"debug","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"} {"level":"info","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4"} {"level":"info","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693"} {"level":"debug","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab"} {"level":"debug","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"} {"level":"debug","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb"} {"level":"info","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf"} {"level":"debug","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54"} {"level":"info","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b"} {"level":"info","ts":"2026-07-06T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad"} {"level":"info","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60282","PortSpecifier":{"PortValue":60282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35081b34-26c2-4f7d-aac2-c132e998ce94","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60282","PortSpecifier":{"PortValue":60282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362154,"nanos":981680023},"http":{"id":"35081b34-26c2-4f7d-aac2-c132e998ce94","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/sub-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35081b34-26c2-4f7d-aac2-c132e998ce94","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43652","PortSpecifier":{"PortValue":43652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43652","PortSpecifier":{"PortValue":43652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362155,"nanos":25035984},"http":{"id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/sub-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac3ca62-921c-4a17-8f9b-68c3e6841c72","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60284","PortSpecifier":{"PortValue":60284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d568884c-5d7c-4bc3-aa26-833f36023e49","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60284","PortSpecifier":{"PortValue":60284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362155,"nanos":69385462},"http":{"id":"d568884c-5d7c-4bc3-aa26-833f36023e49","method":"GET","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jgS7PmqP6ZLwOAv4_GayPGc6IeUW2PuIUFIExcsUKDYRRmMqZvwRDnocCG5h"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jgS7PmqP6ZLwOAv4_GayPGc6IeUW2PuIUFIExcsUKDYRRmMqZvwRDnocCG5h\"}"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e35ce0c5-0346-4099-b56a-51030940ace3","keyName":"e2e-sub-iso-0cd7b5","subscription":"e2e-a-only-74431f","tenant":"e2e-shared-a-91cb9f","userId":"e35ce0c5-0346-4099-b56a-51030940ace3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/sub-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-74431f"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d568884c-5d7c-4bc3-aa26-833f36023e49","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43666","PortSpecifier":{"PortValue":43666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"713a55ef-f965-40de-8419-5cab6b6a8784","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43666","PortSpecifier":{"PortValue":43666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362155,"nanos":116465146},"http":{"id":"713a55ef-f965-40de-8419-5cab6b6a8784","method":"GET","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-meCEUXHS1jUX3MD7_WmVnkp61dQEHCeFHFW9yvU5tJ2jSMi65PRCnBx3YDEt"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2861c1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-meCEUXHS1jUX3MD7_WmVnkp61dQEHCeFHFW9yvU5tJ2jSMi65PRCnBx3YDEt\"}"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2861c1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a36882a1-3bbb-4cce-956f-229d03927a83","keyName":"e2e-sub-iso-21b732","subscription":"e2e-b-only-74431f","tenant":"e2e-shared-b-2861c1","userId":"a36882a1-3bbb-4cce-956f-229d03927a83","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/sub-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-74431f"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"713a55ef-f965-40de-8419-5cab6b6a8784","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57032","PortSpecifier":{"PortValue":57032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57032","PortSpecifier":{"PortValue":57032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362165,"nanos":58116503},"http":{"id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/sub-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47c924bc-c94f-42df-ad4d-798a8aff0cef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"239a725d-2626-48d9-8fc9-622c7783499e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34724","PortSpecifier":{"PortValue":34724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"239a725d-2626-48d9-8fc9-622c7783499e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"239a725d-2626-48d9-8fc9-622c7783499e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34724","PortSpecifier":{"PortValue":34724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362165,"nanos":95235729},"http":{"id":"239a725d-2626-48d9-8fc9-622c7783499e","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"239a725d-2626-48d9-8fc9-622c7783499e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"239a725d-2626-48d9-8fc9-622c7783499e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"239a725d-2626-48d9-8fc9-622c7783499e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"239a725d-2626-48d9-8fc9-622c7783499e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"239a725d-2626-48d9-8fc9-622c7783499e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"239a725d-2626-48d9-8fc9-622c7783499e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/sub-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"239a725d-2626-48d9-8fc9-622c7783499e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"239a725d-2626-48d9-8fc9-622c7783499e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"239a725d-2626-48d9-8fc9-622c7783499e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"239a725d-2626-48d9-8fc9-622c7783499e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"239a725d-2626-48d9-8fc9-622c7783499e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57048","PortSpecifier":{"PortValue":57048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57048","PortSpecifier":{"PortValue":57048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362165,"nanos":132795900},"http":{"id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cNTPIXtAbgpIfiU0_ElBqhArmODKdM2qRliJ0LdAXmS7A68QGLMVBZIuaZJP"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cNTPIXtAbgpIfiU0_ElBqhArmODKdM2qRliJ0LdAXmS7A68QGLMVBZIuaZJP\"}"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fa07db2e-3a4e-46ce-8279-d9858b2df581","keyName":"e2e-sub-iso-92b509","subscription":"e2e-shared-sub-4fdefa","tenant":"e2e-shared-a-91cb9f","userId":"fa07db2e-3a4e-46ce-8279-d9858b2df581","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/sub-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4fdefa"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"567ff1e9-1761-4c3d-910f-f5b55b21e9ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34734","PortSpecifier":{"PortValue":34734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34734","PortSpecifier":{"PortValue":34734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362165,"nanos":177309714},"http":{"id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EnfWd2Xi2XffkIYV_akNbyhzdHsatLmxq4RRQ18wSPJiozyj6SRueyqAN00B"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2861c1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EnfWd2Xi2XffkIYV_akNbyhzdHsatLmxq4RRQ18wSPJiozyj6SRueyqAN00B\"}"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2861c1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7c71020-3d3f-46ca-b606-2703dc395a26","keyName":"e2e-sub-iso-cf8556","subscription":"e2e-shared-sub-4fdefa","tenant":"e2e-shared-b-2861c1","userId":"a7c71020-3d3f-46ca-b606-2703dc395a26","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/sub-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4fdefa"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e7d41ff-d93e-48fb-8993-940e80f0d567","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a122aeed0221ac46b661fe0b239a724d188090c782620340be695fe53b4f44cf"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba63d9cfb4c10668c48e0944176f9dd0f99f027e590df6918be6e9f92bbd23bf"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b11fcc3e87fd162921145a5def90a0c752203beb2058276758f7ec9a57869ad"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22f5dc6ed04aeb08475b67587ba5e217145dbb81710dfb7cd71a3e5ed66d284d"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37f1e40879a8aa6d3b687d510bf88e63798fcbc52398ad6166a424efd5557da4"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60316d50dcb407e1566be785f3dd60d692b7f05558d1d5efc472d0a5a8905cdb"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54beb41c2541065f1aa9541d59715e6e2684a3f32a9766a54bcb47f7502c597b"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbde307d34ed58b154534f69a47c4bec957ed9c942d14fb89c97e538cd5916ab"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5f74aabd5e54bbde3e6c0c49643e58d1f5826d8ee552626d4b04b0e3cc37479"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae016d55c6f0e25578b1282b2f145c0f99b3e754ecc38c9cad5ef5dbba418685"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14c2ed89442430928f58bc31c5d5c5f0c5e59727889027a3ce9062bf92a57f4b"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a9ce0109450e7c3d8cc22d74478ab01aa8c13a848f6e03e7ce14b899fc23693"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc7679131ac48a575341d2f4646900d01f9e75f07cf5ec08b7d7802c51255e5e"} {"level":"info","ts":"2026-07-06T18:22:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcb64cb09d046545e3ae2d101aaa858f372dae8275c91c97b9a90644ec204a0f"} {"level":"info","ts":"2026-07-06T18:22:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b10c1a4d6c920081cf54c9ec1c531ef2f04979288684be11fb0fa1ffa3dbd7ea"} {"level":"info","ts":"2026-07-06T18:22:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c666909ba9a84cd3d66f2a95b70584d7a9fd2e7fb294d74cc244360aa10e3280"} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f"} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f"} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f"} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e"} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e"} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e"} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b"} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"} {"level":"info","ts":"2026-07-06T18:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b"} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a"} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a"} {"level":"info","ts":"2026-07-06T18:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce"} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce"} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce"} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631"} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631"} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631"} {"level":"debug","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631"} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631"} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5"} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5"} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5"} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42"} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5"} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42"} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc"} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc"} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad8775a6d776bb4f34b0a93e2e6b2fbbe1461ebbac98be06ba255468e9b4edc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc"} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad8775a6d776bb4f34b0a93e2e6b2fbbe1461ebbac98be06ba255468e9b4edc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad8775a6d776bb4f34b0a93e2e6b2fbbe1461ebbac98be06ba255468e9b4edc9"} {"level":"info","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad8775a6d776bb4f34b0a93e2e6b2fbbe1461ebbac98be06ba255468e9b4edc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad8775a6d776bb4f34b0a93e2e6b2fbbe1461ebbac98be06ba255468e9b4edc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad8775a6d776bb4f34b0a93e2e6b2fbbe1461ebbac98be06ba255468e9b4edc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"} {"level":"info","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad8775a6d776bb4f34b0a93e2e6b2fbbe1461ebbac98be06ba255468e9b4edc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc"} {"level":"info","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad8775a6d776bb4f34b0a93e2e6b2fbbe1461ebbac98be06ba255468e9b4edc9"} {"level":"info","ts":"2026-07-06T18:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"} {"level":"debug","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"} {"level":"debug","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"} {"level":"debug","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"} {"level":"debug","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"} {"level":"debug","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad8775a6d776bb4f34b0a93e2e6b2fbbe1461ebbac98be06ba255468e9b4edc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad8775a6d776bb4f34b0a93e2e6b2fbbe1461ebbac98be06ba255468e9b4edc9"} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631"} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc"} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc"} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5"} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b"} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:24:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:24:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5"} {"level":"debug","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:24:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:24:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"debug","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5"} {"level":"debug","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54"} {"level":"debug","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"} {"level":"debug","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42"} {"level":"debug","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f"} {"level":"debug","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce"} {"level":"debug","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"} {"level":"info","ts":"2026-07-06T18:24:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"} {"level":"info","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41680","PortSpecifier":{"PortValue":41680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41680","PortSpecifier":{"PortValue":41680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362253,"nanos":805575456},"http":{"id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf9da4d1-837d-4bfb-b0c0-8de4684af28d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38356","PortSpecifier":{"PortValue":38356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"466c7df7-69db-44fe-b951-7644f1c27aa9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38356","PortSpecifier":{"PortValue":38356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362253,"nanos":851556387},"http":{"id":"466c7df7-69db-44fe-b951-7644f1c27aa9","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/rate-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"466c7df7-69db-44fe-b951-7644f1c27aa9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41692","PortSpecifier":{"PortValue":41692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","method":"POST","path":"/ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f/v1/completions","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41692","PortSpecifier":{"PortValue":41692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362253,"nanos":896604975},"http":{"id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1U49xStqfdMO5EbHA_3D6RghW8xg32UNAfl0KiscKsiRLIGuM7lVwhtl5YJo1"} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1U49xStqfdMO5EbHA_3D6RghW8xg32UNAfl0KiscKsiRLIGuM7lVwhtl5YJo1\"}"} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d77ae8a6-fdda-4f18-804b-decef2ab8a4f","keyName":"e2e-rate-a-3e7234","subscription":"e2e-rate-iso-a-3e7234","tenant":"e2e-shared-a-91cb9f","userId":"d77ae8a6-fdda-4f18-804b-decef2ab8a4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\",\"requestedSubscription\":\"e2e-rate-iso-a-3e7234\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-91cb9f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3e7234","namespace":"ai-tenant-e2e-shared-a-91cb9f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d77ae8a6-fdda-4f18-804b-decef2ab8a4f","keyName":"e2e-rate-a-3e7234","selected_subscription":"e2e-rate-iso-a-3e7234","selected_subscription_key":"ai-tenant-e2e-shared-a-91cb9f/e2e-rate-iso-a-3e7234@ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-91cb9f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3e7234","namespace":"ai-tenant-e2e-shared-a-91cb9f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3e7234"} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:24:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beb499ef-f5a8-4e09-a3b2-1c7c78e454f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41704","PortSpecifier":{"PortValue":41704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"610fc6d0-7738-4dde-8922-9f77297bad64","method":"POST","path":"/ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f/v1/completions","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41704","PortSpecifier":{"PortValue":41704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362255,"nanos":13250962},"http":{"id":"610fc6d0-7738-4dde-8922-9f77297bad64","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1U49xStqfdMO5EbHA_3D6RghW8xg32UNAfl0KiscKsiRLIGuM7lVwhtl5YJo1"} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1U49xStqfdMO5EbHA_3D6RghW8xg32UNAfl0KiscKsiRLIGuM7lVwhtl5YJo1\"}"} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d77ae8a6-fdda-4f18-804b-decef2ab8a4f","keyName":"e2e-rate-a-3e7234","subscription":"e2e-rate-iso-a-3e7234","tenant":"e2e-shared-a-91cb9f","userId":"d77ae8a6-fdda-4f18-804b-decef2ab8a4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\",\"requestedSubscription\":\"e2e-rate-iso-a-3e7234\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-91cb9f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3e7234","namespace":"ai-tenant-e2e-shared-a-91cb9f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3e7234"} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d77ae8a6-fdda-4f18-804b-decef2ab8a4f","keyName":"e2e-rate-a-3e7234","selected_subscription":"e2e-rate-iso-a-3e7234","selected_subscription_key":"ai-tenant-e2e-shared-a-91cb9f/e2e-rate-iso-a-3e7234@ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-91cb9f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3e7234","namespace":"ai-tenant-e2e-shared-a-91cb9f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:24:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"610fc6d0-7738-4dde-8922-9f77297bad64","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41718","PortSpecifier":{"PortValue":41718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","method":"POST","path":"/ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f/v1/completions","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41718","PortSpecifier":{"PortValue":41718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362256,"nanos":54986441},"http":{"id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1U49xStqfdMO5EbHA_3D6RghW8xg32UNAfl0KiscKsiRLIGuM7lVwhtl5YJo1"} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1U49xStqfdMO5EbHA_3D6RghW8xg32UNAfl0KiscKsiRLIGuM7lVwhtl5YJo1\"}"} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d77ae8a6-fdda-4f18-804b-decef2ab8a4f","keyName":"e2e-rate-a-3e7234","subscription":"e2e-rate-iso-a-3e7234","tenant":"e2e-shared-a-91cb9f","userId":"d77ae8a6-fdda-4f18-804b-decef2ab8a4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\",\"requestedSubscription\":\"e2e-rate-iso-a-3e7234\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-91cb9f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3e7234","namespace":"ai-tenant-e2e-shared-a-91cb9f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3e7234"} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d77ae8a6-fdda-4f18-804b-decef2ab8a4f","keyName":"e2e-rate-a-3e7234","selected_subscription":"e2e-rate-iso-a-3e7234","selected_subscription_key":"ai-tenant-e2e-shared-a-91cb9f/e2e-rate-iso-a-3e7234@ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-91cb9f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3e7234","namespace":"ai-tenant-e2e-shared-a-91cb9f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:24:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c71a2c1-dcc9-4c3e-b30a-6cc5af83b2af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41532","PortSpecifier":{"PortValue":41532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41532","PortSpecifier":{"PortValue":41532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362268,"nanos":912130559},"http":{"id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b5c47bd-fa86-4435-a4ab-9d8d9953d65c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34416","PortSpecifier":{"PortValue":34416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34416","PortSpecifier":{"PortValue":34416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362268,"nanos":956523836},"http":{"id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"]}} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a601b7f51960"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0e2c9bcb-2198-4dc7-84dc-48d8c09accee"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea918220-c4e1-4b2c-9b9f-6505fecce974","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/rate-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fc014c7-cdb7-4522-b345-fd5115013f1c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41534","PortSpecifier":{"PortValue":41534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7e34763-a22e-92a9-b290-bc538b3b250a","method":"POST","path":"/ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f/v1/completions","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41534","PortSpecifier":{"PortValue":41534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362269,"nanos":1112641},"http":{"id":"a7e34763-a22e-92a9-b290-bc538b3b250a","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BlVRKvWyYuhh6aV0_BO5BncyBk7B1MfbhXDKUX249ZG77T5GvCPTV6jqNQOJ"} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BlVRKvWyYuhh6aV0_BO5BncyBk7B1MfbhXDKUX249ZG77T5GvCPTV6jqNQOJ\"}"} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6815d09d-8150-4236-ab37-ec50304dc8e8","keyName":"e2e-rate-a-54e3cd","subscription":"e2e-rate-iso-a-54e3cd","tenant":"e2e-shared-a-91cb9f","userId":"6815d09d-8150-4236-ab37-ec50304dc8e8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\",\"requestedSubscription\":\"e2e-rate-iso-a-54e3cd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-91cb9f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-54e3cd","namespace":"ai-tenant-e2e-shared-a-91cb9f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-54e3cd"} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6815d09d-8150-4236-ab37-ec50304dc8e8","keyName":"e2e-rate-a-54e3cd","selected_subscription":"e2e-rate-iso-a-54e3cd","selected_subscription_key":"ai-tenant-e2e-shared-a-91cb9f/e2e-rate-iso-a-54e3cd@ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-91cb9f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-54e3cd","namespace":"ai-tenant-e2e-shared-a-91cb9f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:24:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7e34763-a22e-92a9-b290-bc538b3b250a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41544","PortSpecifier":{"PortValue":41544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","method":"POST","path":"/ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f/v1/completions","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41544","PortSpecifier":{"PortValue":41544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362270,"nanos":37733166},"http":{"id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BlVRKvWyYuhh6aV0_BO5BncyBk7B1MfbhXDKUX249ZG77T5GvCPTV6jqNQOJ"} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BlVRKvWyYuhh6aV0_BO5BncyBk7B1MfbhXDKUX249ZG77T5GvCPTV6jqNQOJ\"}"} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6815d09d-8150-4236-ab37-ec50304dc8e8","keyName":"e2e-rate-a-54e3cd","subscription":"e2e-rate-iso-a-54e3cd","tenant":"e2e-shared-a-91cb9f","userId":"6815d09d-8150-4236-ab37-ec50304dc8e8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\",\"requestedSubscription\":\"e2e-rate-iso-a-54e3cd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-91cb9f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-54e3cd","namespace":"ai-tenant-e2e-shared-a-91cb9f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-54e3cd"} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6815d09d-8150-4236-ab37-ec50304dc8e8","keyName":"e2e-rate-a-54e3cd","selected_subscription":"e2e-rate-iso-a-54e3cd","selected_subscription_key":"ai-tenant-e2e-shared-a-91cb9f/e2e-rate-iso-a-54e3cd@ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-91cb9f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-54e3cd","namespace":"ai-tenant-e2e-shared-a-91cb9f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:24:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bce9f658-03b1-47c7-a23f-a06c653a2a52","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41546","PortSpecifier":{"PortValue":41546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","method":"POST","path":"/ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f/v1/completions","host":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41546","PortSpecifier":{"PortValue":41546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362271,"nanos":84650333},"http":{"id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","method":"POST","headers":{":authority":"e2e-shared-a-91cb9f.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BlVRKvWyYuhh6aV0_BO5BncyBk7B1MfbhXDKUX249ZG77T5GvCPTV6jqNQOJ"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BlVRKvWyYuhh6aV0_BO5BncyBk7B1MfbhXDKUX249ZG77T5GvCPTV6jqNQOJ\"}"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6815d09d-8150-4236-ab37-ec50304dc8e8","keyName":"e2e-rate-a-54e3cd","subscription":"e2e-rate-iso-a-54e3cd","tenant":"e2e-shared-a-91cb9f","userId":"6815d09d-8150-4236-ab37-ec50304dc8e8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\",\"requestedSubscription\":\"e2e-rate-iso-a-54e3cd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-91cb9f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-91cb9f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-54e3cd","namespace":"ai-tenant-e2e-shared-a-91cb9f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-54e3cd"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6815d09d-8150-4236-ab37-ec50304dc8e8","keyName":"e2e-rate-a-54e3cd","selected_subscription":"e2e-rate-iso-a-54e3cd","selected_subscription_key":"ai-tenant-e2e-shared-a-91cb9f/e2e-rate-iso-a-54e3cd@ai-tenant-e2e-shared-a-91cb9f/rate-test-model-91cb9f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-91cb9f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-54e3cd","namespace":"ai-tenant-e2e-shared-a-91cb9f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5d4ba15-c4c5-4fcb-8c86-793362fa9d63","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34422","PortSpecifier":{"PortValue":34422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","method":"POST","path":"/ai-tenant-e2e-shared-b-2861c1/rate-test-model-2861c1/v1/completions","host":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34422","PortSpecifier":{"PortValue":34422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362271,"nanos":117349002},"http":{"id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","method":"POST","headers":{":authority":"e2e-shared-b-2861c1.apps.3b95d996-eb76-414f-9215-a601b7f51960.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-2861c1/rate-test-model-2861c1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-c2gYv18eCI7MAmeD_xwSK5KsFUi94tGrExWRKPSZvkEMmNJEdjr34BwWp8UU"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2861c1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-c2gYv18eCI7MAmeD_xwSK5KsFUi94tGrExWRKPSZvkEMmNJEdjr34BwWp8UU\"}"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2861c1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"003358d8-747a-4add-83dd-081e7ce99913","keyName":"e2e-rate-b-54e3cd","subscription":"e2e-rate-iso-b-54e3cd","tenant":"e2e-shared-b-2861c1","userId":"003358d8-747a-4add-83dd-081e7ce99913","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-2861c1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-2861c1/rate-test-model-2861c1\",\"requestedSubscription\":\"e2e-rate-iso-b-54e3cd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2861c1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2861c1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-54e3cd","namespace":"ai-tenant-e2e-shared-b-2861c1","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2861c1/rate-test-model-2861c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-54e3cd"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"003358d8-747a-4add-83dd-081e7ce99913","keyName":"e2e-rate-b-54e3cd","selected_subscription":"e2e-rate-iso-b-54e3cd","selected_subscription_key":"ai-tenant-e2e-shared-b-2861c1/e2e-rate-iso-b-54e3cd@ai-tenant-e2e-shared-b-2861c1/rate-test-model-2861c1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2861c1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-54e3cd","namespace":"ai-tenant-e2e-shared-b-2861c1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:24:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c212f5c-ff73-49fe-aa75-2db636a5c1a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a32fd521a026341567c9f33b04d476cf8de64afd9124608c3defe0e1485af0f"} {"level":"info","ts":"2026-07-06T18:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7a21b4cdf114bb4dbf14e004f7772c2d7eeeb52e457ccd3dfb3e284545c0c54"} {"level":"info","ts":"2026-07-06T18:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae48a7a1318ce0804109c8846bf0dc14233f4eef3d50c117b2d55efc0fc84d01"} {"level":"info","ts":"2026-07-06T18:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e11b08fb2ae555f1bac405855cdec1f20505d96ac721eedcae76f90d8437fcc"} {"level":"info","ts":"2026-07-06T18:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c19999a1b84c0d509d24a9b04f711f32e628b3666b20de1eef038de9b670805"} {"level":"info","ts":"2026-07-06T18:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16100e1c59dbe345b325271cb1890d24561d9e3086272ada4a3ad5f3a1e16f1b"} {"level":"info","ts":"2026-07-06T18:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f1d6de3a8b047f52e189523bbfe1065cb1fbc0a3011f7f14e1e5bd77bb3d32c"} {"level":"info","ts":"2026-07-06T18:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a03803211610ee38323722f676e13539d5a87e5af034d2d33fdb44fe53fa6c5"} {"level":"info","ts":"2026-07-06T18:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ece0802b4c793549dbb74307eddd9b5273bc6f8fe88ae4e74ec73eeda62070a"} {"level":"info","ts":"2026-07-06T18:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad8775a6d776bb4f34b0a93e2e6b2fbbe1461ebbac98be06ba255468e9b4edc9"} {"level":"info","ts":"2026-07-06T18:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b29246e88d951dcf450b4adb0e683d970187cbeace6e67009529884378fc2f42"} {"level":"info","ts":"2026-07-06T18:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69af7d02bff7b27b1dc2a1464e666c20a8b1f788273895bf56132495bb14085e"} {"level":"info","ts":"2026-07-06T18:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cebe9782195d5df7f4bf2a69eb03e9f98d0fe1832b9fafb1255b0f24b8d8519"} {"level":"info","ts":"2026-07-06T18:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6491e09a4be923d09a7a1a01d1e17650f5d1a68bd3b776bb013390d7b6da97a3"} {"level":"info","ts":"2026-07-06T18:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2faeba5814663744752823a48a005e040dae3c44eddbdfef38ee38848826ab00"} {"level":"info","ts":"2026-07-06T18:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/616b05b904de1882e2b28a152d6dd7a094d876c3cb9a0e9ca7640bccc6430cce"} {"level":"info","ts":"2026-07-06T18:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72947a6b0970c518f652aed59447313d54b206aa78b5e4a3628a84235cc02f60"} {"level":"info","ts":"2026-07-06T18:24:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37d8ec5a86486f21548a084af3296033e3e25422d246721d5f5522bc8e4ea631"} {"level":"info","ts":"2026-07-06T18:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0de84406e4b211b74ee1449b567f64a79a21e946050d5ad2fb71216afa76683d"} {"level":"info","ts":"2026-07-06T18:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ba88085c6cff4e65cf3cf2867218a0c89696e1ffcf71a69c57d7850be477ab7"}